AWS Security ChangesHomeSearch

AWS AmazonRDS: Babelfish release notes: new versions, fixes, and GRANT/REVOKE role restriction

Service: AmazonRDS · 2026-09-30 · Security-related medium

File: AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md · Type: authz

Summary

Adds release notes for Babelfish for Aurora PostgreSQL versions 6.2, 5.7, 4.11, 3.15, 2.18, 2.15 and numerous patch releases (TVP stale-row fix, prepared-statement plan cache fix, identifier length limits, temp tables on replicas, geospatial/spatial index support, XML support, etc.), plus a note that Babelfish now restricts GRANT/REVOKE on Babelfish-created roles via the PG port.

Security assessment

The only clearly security-relevant entry is the restriction of GRANT/REVOKE on Babelfish-created roles through the PostgreSQL port, which closes a privilege-management/authorization gap (preventing role permission changes outside the intended T-SQL path). Other entries (e.g. prepared statements reusing a cached plan with wrong parameter bindings, TVP returning stale rows) are correctness/stability bugs that could have data-integrity implications but are not framed as vulnerabilities and reference no CVE.

Evidence

  * Babelfish will now restrict GRANT/REVOKE on any Babelfish created role via PG port.

Diff

diff --git a/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md b/AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md
index f557df4..ebea533 100644
--- a//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md
+++ b//AmazonRDS/latest/AuroraPostgreSQLReleaseNotes/AuroraBabelfish.Updates.md
@@ -39,0 +40,2 @@ For a list of supported and unsupported functionality across different Babelfish
+  * Babelfish for Aurora PostgreSQL 6.2
+
@@ -46,0 +49,66 @@ For a list of supported and unsupported functionality across different Babelfish
+### Babelfish for Aurora PostgreSQL 6.2
+
+This release of Aurora Babelfish is provided with Aurora PostgreSQL 18.6. For more information about the improvements in Aurora PostgreSQL 18.6, see [Amazon Aurora PostgreSQL updates](./AuroraPostgreSQL.Updates.html). Babelfish for Aurora PostgreSQL 6.2 adds several new features, enhancements, and fixes. For more information about Babelfish for Aurora PostgreSQL, see [Working with Babelfish for Aurora PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/babelfish.html). 
+
+#### Aurora Babelfish release 6.2.0, September 29, 2026
+
+**New Features**
+
+  * Babelfish now supports local Temporary tables and Table Variables on Aurora replicas (see [Babelfish temporary tables on read replicas](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/babelfish-temp-tables-read-replicas.html)).
+
+  * Enabled support for MultiLinestring instances and added support for Spatial Indexes (see [Babelfish supports Geospatial data types](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/babelfish-geospatial.html)).
+
+  * Added support for `FOR XML AUTO` mode and the XML `.query()` method on XML data types.
+
+  * Added support for correlated aggregate subquery transformation, to improve query performance. This feature is controlled by the GUC `babelfishpg_tsql.apg_enable_subquery_to_window_transform` (default: ON).
+
+
+
+
+**Critical enhancements**
+
+  * Fixed connection failures when using -U or -d flags with login or database names exceeding 63 characters that were internally truncated by Babelfish.
+
+  * Fixed the crash with sqlcmd during the INSERT-EXECUTE with IDENTITY columns.
+
+  * Fixed an issue where re-executing a prepared stored procedure with a Table-Valued Parameter (TVP) on the same connection returned stale data from the first batch instead of the current batch's rows.
+
+  * Fixed an issue where prepared statements with identically named parameters but different parameter lists could incorrectly reuse a cached query plan, causing queries to execute with wrong parameter bindings.
+
+
+
+
+**High Priority stability enhancements**
+
+  * Fixed `FOR JSON AUTO` to recognize INSERTED and DELETED transition tables inside triggers as valid table sources.
+
+  * Fixed the error raised when using `INSERT INTO...EXEC` with a variable assigned as the procedure name.
+
+  * Fixed the failure in `INSERT EXEC` with `OUTPUT` when the executed procedure contains nested procedure calls.
+
+  * Fixed `INSERT EXEC` to correctly follow transaction behavior, ensuring proper rollback and commit semantics consistent with SQL Server.
+
+  * Fixed INSERT..EXECUTE to work correctly when the called procedure internally contains an `EXEC(SELECT)` statement.
+
+  * Restricted all identifier lengths to match SQL Server limits of 128 characters for regular objects and 116 characters for local temporary objects.
+
+  * Introduced persistent cache to improve cold-start performance for TSQL stored procedures and functions in new sessions (see [Procedure parse cache in Babelfish](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/babelfish-procedure-parse-cache.html)).
+
+
+
+
+**Additional improvements and enhancements**
+
+  * Added support for BulkCopy on Babelfish temporary tables.
+
+  * Added support for the OUTPUT clause in `INSERT EXEC` statements.
+
+  * Fixed incorrect function resolution issues which led to failures during dump-restore.
+
+  * Fixed `CAST(DATE AS DATETIME2)` hangs for dates outside the valid datetime2 range (0001-01-01 to 9999-12-31).
+
+  * Improved the performance when expanding Views, Indexes, Keys and Tables in SQL Server Management Studio.
+
+
+
+
@@ -116,0 +185,16 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 18.3. For mo
+#### Aurora Babelfish release 6.0.1, July 20, 2026
+
+**Critical stability enhancements**
+
+  * Fixed an issue in Babelfish where a table-valued parameter (TVP) stored only the last row, repeated N times (where N is the total number of rows provided).
+
+
+
+
+**Additional improvements and enhancements**
+
+  * Fixed an issue where go-sqlcmd client driver failed to return query results.
+
+
+
+
@@ -208,0 +293,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 18.3. For mo
+  * Babelfish for Aurora PostgreSQL 5.7
+
@@ -223,0 +310,60 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 18.3. For mo
+### Babelfish for Aurora PostgreSQL 5.7
+
+This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.11. For more information about the improvements in Aurora PostgreSQL 17.11, see [Amazon Aurora PostgreSQL updates](./AuroraPostgreSQL.Updates.html). Babelfish for Aurora PostgreSQL 5.7 adds several new features, enhancements, and fixes. For more information about Babelfish for Aurora PostgreSQL, see [Working with Babelfish for Aurora PostgreSQL](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/babelfish.html). 
+
+#### Aurora Babelfish release 5.7.0, September 29, 2026
+
+**New Features**
+
+  * Babelfish now supports local Temporary tables and Table Variables on Aurora replicas (see [Babelfish temporary tables on read replicas](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/babelfish-temp-tables-read-replicas.html)).
+
+  * Enabled support for MultiLinestring instances and added support for Spatial Indexes (see [Babelfish supports Geospatial data types](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/babelfish-geospatial.html)).
+
+  * Added support for `FOR XML AUTO` mode and the XML `.query()` method on XML data types.
+
+
+
+
+**Critical enhancements**
+
+  * Fixed connection failures when using -U or -d flags with login or database names exceeding 63 characters that were internally truncated by Babelfish.
+
+  * Fixed the crash with sqlcmd during the INSERT-EXECUTE with IDENTITY columns.
+
+  * Fixed an issue where re-executing a prepared stored procedure with a Table-Valued Parameter (TVP) on the same connection returned stale data from the first batch instead of the current batch's rows.
+
+
+
+
+**High Priority stability enhancements**
+
+  * Fixed `FOR JSON AUTO` to recognize INSERTED and DELETED transition tables inside triggers as valid table sources.
+
+  * Fixed the error raised when using `INSERT INTO...EXEC` with a variable assigned as the procedure name.
+
+  * Fixed the failure in `INSERT EXEC` with `OUTPUT` when the executed procedure contains nested procedure calls.
+
+  * Fixed `INSERT EXEC` to correctly follow transaction behavior, ensuring proper rollback and commit semantics consistent with SQL Server.
+
+  * Fixed INSERT..EXECUTE to work correctly when the called procedure internally contains an `EXEC(SELECT)` statement.
+
+  * Fixed an issue where prepared statements with identically named parameters but different parameter lists could incorrectly reuse a cached query plan, causing queries to execute with wrong parameter bindings.
+
+  * Introduced persistent cache to improve cold-start performance for TSQL stored procedures and functions in new sessions (see [Procedure parse cache in Babelfish](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/babelfish-procedure-parse-cache.html)).
+
+
+
+
+**Additional improvements and enhancements**
+
+  * Added support for BulkCopy on Babelfish temporary tables.
+
+  * Added support for the OUTPUT clause in `INSERT EXEC` statements.
+
+  * Fixed `CAST(DATE AS DATETIME2)` hangs for dates outside the valid datetime2 range (0001-01-01 to 9999-12-31).
+
+  * Improved the performance when expanding Views, Indexes, Keys and Tables in SQL Server Management Studio.
+
+
+
+
@@ -293,0 +440,16 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.9. For mo
+#### Aurora Babelfish release 5.5.1, July 20, 2026
+
+**Critical stability enhancements**
+
+  * Fixed an issue in Babelfish where a table-valued parameter (TVP) stored only the last row, repeated N times (where N is the total number of rows provided).
+
+
+
+
+**Additional improvements and enhancements**
+
+  * Fixed an issue where go-sqlcmd client driver failed to return query results.
+
+
+
+
@@ -382 +544 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.7. For mo
-#### Aurora Babelfish release 5.4.2, March 20, 2026
+#### Aurora Babelfish release 5.4.2, July 20, 2026
@@ -387,0 +550 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.7. For mo
+  * Fixed an issue in Babelfish where a table-valued parameter (TVP) stored only the last row, repeated N times (where N is the total number of rows provided).
@@ -391 +553,0 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.7. For mo
-#### Aurora Babelfish release 5.4.1, January 16, 2026
@@ -393 +555 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.7. For mo
-**Critical stability enhancements**
+**High Priority stability enhancements**
@@ -395 +557 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.7. For mo
-  * Fixed an issue where an `UPDATE` statement with `OUTPUT` clause may skip rows when there are concurrent updates on the same row.
+  * Fixed an issue in nested procedure calls that caused temp table cleanup failures and parser errors.
@@ -400 +562 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.7. For mo
-**High Priority stability enhancements**
+#### Aurora Babelfish release 5.4.1, January 16, 2026
@@ -402 +564,3 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.7. For mo
-  * Fixed an issue in nested procedure calls that caused temp table cleanup failures and parser errors.
+**Critical stability enhancements**
+
+  * Fixed an issue where an `UPDATE` statement with `OUTPUT` clause may skip rows when there are concurrent updates on the same row.
@@ -519 +683 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.6. For mo
-#### Aurora Babelfish release 5.3.2, May 07, 2026
+#### Aurora Babelfish release 5.3.2, July 20, 2026
@@ -522,0 +687,2 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.6. For mo
+  * Fixed an issue in Babelfish where a table-valued parameter (TVP) stored only the last row, repeated N times (where N is the total number of rows provided).
+
@@ -662,0 +829,9 @@ This release of Aurora Babelfish is provided with Aurora PostgreSQL 17.5. For mo