AWS AmazonRDS high security documentation change
Summary
Added release notes for Babelfish for Aurora PostgreSQL 6.0, including new features, critical enhancements, stability improvements, and bug fixes.
Security assessment
The update includes security-related fixes: restricting ownership changes of Babelfish objects from the PostgreSQL port, preventing users from altering Babelfish objects in the sys schema, and blocking ALTER AUTHORIZATION on databases for certain roles. These changes address potential privilege escalation risks and unauthorized modifications to system objects.
Diff
diff --git a/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md b/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md index 36bc343ba..ffa97f1a5 100644 --- a//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md +++ b//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md @@ -7 +7 @@ -Babelfish for Aurora PostgreSQL 5.x versionsBabelfish for Aurora PostgreSQL 4.x versionsBabelfish for Aurora PostgreSQL 3.x versions (includes some deprecated versions)Babelfish for Aurora PostgreSQL 2.x versions (includes some deprecated versions)Babelfish for Aurora PostgreSQL 1.x versions (includes some deprecated versions) +Babelfish for Aurora PostgreSQL 6.x versionsBabelfish for Aurora PostgreSQL 5.x versionsBabelfish for Aurora PostgreSQL 4.x versionsBabelfish for Aurora PostgreSQL 3.x versions (includes some deprecated versions)Babelfish for Aurora PostgreSQL 2.x versions (includes some deprecated versions)Babelfish for Aurora PostgreSQL 1.x versions (includes some deprecated versions) @@ -20,0 +21,2 @@ For a list of supported and unsupported functionality across different Babelfish + * Babelfish for Aurora PostgreSQL 6.x versions + @@ -33,0 +36,101 @@ For a list of supported and unsupported functionality across different Babelfish +## Babelfish for Aurora PostgreSQL 6.x versions + +###### Version updates + + * Babelfish for Aurora PostgreSQL 6.0 + + + + +### Babelfish for Aurora PostgreSQL 6.0 + +This release of Aurora Babelfish is provided with Aurora PostgreSQL 18.3. For more information about the improvements in Aurora PostgreSQL 18.3, see [Amazon Aurora PostgreSQL updates](./AuroraPostgreSQL.Updates.html). Babelfish for Aurora PostgreSQL 6.0 adds several new features, enhancements, and fixes. For more information about Babelfish for Aurora PostgreSQL, see [Working with Babelfish for Aurora PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/babelfish.html). + +#### Aurora Babelfish release 6.0.0, June 10, 2026 + +**New Features** + + * Added support for Eager aggregation, which pushes aggregation before joins to improve query performance. Controlled by GUCs `babelfishpg_tsql.enable_eager_aggregate` (default: ON) and `min_eager_agg_group_size` to set the minimum average group size required to consider applying Eager aggregation (default: 8). + + * Added support for Polygon instances for geography/geometry datatype. + + * Added support for implicit cast from (n)varchar/(n)char to datetimeoffset datatype. + + * Added support for sys.fn_varbintohexstr system object. + + + + +**Critical enhancements** + + * Fixed an issue where executing queries from PostgreSQL endpoint in Active Directory Authentication enabled instances may lead to a reboot. + + * Fixed an issue where update with output clause may skip rows during concurrent updates. + + * DROP LOGIN now correctly returns an error when attempting to drop a login that is the owner of a database. + + + + +**High Priority stability enhancements** + + * Fixed incorrect return datatype in UNION queries involving datetimeoffset, (n)varchar and datetime types. + + * Fixed issue in coalesce involving datetimeoffset and (n)varchar types. + + * Fixed UNION and CASE expressions with varbinary and string literals to correctly resolve to varchar instead of varbinary. + + * Restricted ownership change of Babelfish objects from PG port. + + * Fixed an issue in procedure calls leading to incorrect lifecycle handling of temp tables. + + * Restricted users from altering Babelfish objects in sys schema. + + * Fixed the scale/precision handling for MIN/MAX functions on CHAR/NCHAR datatypes. + + * Fixed high CPU utilization during concurrent connection establishment for pyODBC connections. + + * Fixed inconsistent index scans for binary/varbinary comparison operators and added cross-type support. + + * Fixed an issue in nested procedure calls that caused temp table cleanup failures and parser errors. + + * Blocked ALTER AUTHORIZATION on database when the new owner is a database role, fixed server role, or sysadmin. + + + + +**Additional improvements and enhancements** + + * Fixed an issue where casting string values to sqlvariant may cause client to hang. + + * Fixed cast and convert functions between datatypes (n)char & (var)binary. + + * Added fix to handle UDT datatypes in DATEADD() function. + + * Fixed handling for white space characters in the ISNUMERIC() function to match T-SQL behavior. + + * Fixed an issue in SELECT queries with reserved keywords used as column aliases. + + * Fixed output format when casting datetime and smalldatetime to (n)varchar/(n)char. + + * Fixed handling of scale/precision for empty string casting to binary. + + * Fixed concatenation of binaries to produce expected results. + + * Fixed trailing blanks being incorrectly treated as insignificant in LIKE operator in case of exact pattern matching. + + * Fixed an issue where primary key information was not being sent in TDS response for ADO.NET FillSchema() operations. + + * Fixed scale/precision handling for concatenated results of binaries. + + * Fixed a rare issue where parallel query runs into unexpected error when table OID reaches to certain limit. + + * Fixed an issue where MONEY type conversion incorrectly rejected few valid ASCII and special characters. + + * Fixed convert function to properly apply style parameter when converting SMALLMONEY to string types, ensuring correct formatting for styles 0, 1, 2, and 126 matching with T-SQL behavior. + + * Fixed multiple convert function issues for MONEY/SMALLMONEY type to string conversions, including proper handling of negative style parameters and invalid style value. + + + +