AWS athena: Athena JDBC 3.8.1 release notes: Netty security update

Service: athena · 2026-09-27 · Security-related high

File: athena/latest/ug/jdbc-v3-driver-release-notes.md · Type: network

Summary

Adds 3.8.1 release notes (released 2026-08-28) including a security update upgrading bundled Netty from 4.1.133.Final to 4.1.135.Final with security fixes, plus proxy support for DataZone auth and GovCloud trusted identity propagation fixes.

Security assessment

The release note explicitly announces a security update to the bundled Netty networking dependency, meaning shipped client-driver vulnerabilities are remediated in 3.8.1 and users are urged to upgrade. No specific CVE identifier is cited in the diff, but the dependency upgrade is a concrete vulnerability fix affecting a network-facing library.

Evidence

+  * Security update – This release upgrades the bundled Netty dependency from 4.1.133.Final to 4.1.135.Final, which includes security fixes. To help keep your connections to Athena secure, we recommend upgrading to this driver version.

Diff

diff --git a/athena/latest/ug/jdbc-v3-driver-release-notes.md b/athena/latest/ug/jdbc-v3-driver-release-notes.md
index 07eed0c23..a277e286c 100644
--- a//athena/latest/ug/jdbc-v3-driver-release-notes.md
+++ b//athena/latest/ug/jdbc-v3-driver-release-notes.md
@@ -7 +7 @@
-3.8.03.7.03.6.03.5.13.5.03.4.03.3.03.2.23.2.13.2.03.1.03.0.0
+3.8.13.8.03.7.03.6.03.5.13.5.03.4.03.3.03.2.23.2.13.2.03.1.03.0.0
@@ -12,0 +13,15 @@ These release notes provide details of improvements and fixes in the Amazon Athe
+## 3.8.1
+
+Released 2026-08-28
+
+### Improvements
+
+  * Security update – This release upgrades the bundled Netty dependency from 4.1.133.Final to 4.1.135.Final, which includes security fixes. To help keep your connections to Athena secure, we recommend upgrading to this driver version.
+
+  * Proxy support for Amazon DataZone authentication – The Amazon DataZone IAM and Amazon DataZone IAM Identity Center credential providers now route their network calls through the configured proxy. This resolves connection failures to Amazon DataZone and IAM Identity Center endpoints in environments where a proxy handles DNS resolution.
+
+  * Trusted identity propagation in AWS GovCloud (US) – The IAM Identity Center context provider now derives its partition from the resolved access role ARN. This resolves authentication failures for trusted identity propagation in AWS GovCloud (US) Regions.
+
+
+
+