AWS AmazonRDS: Add RDS Extended Support releases fixing multiple CVEs

Service: AmazonRDS · 2026-09-30 · Security-related high

File: AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-extendedsupport.md · CVE: CVE-2026-6473, CVE-2026-6474, CVE-2026-6475, CVE-2026-6477, CVE-2026-6478, CVE-2026-6479, CVE-2026-6637

Summary

Adds release notes for RDS Extended Support versions 13.23-RDS.20260514, 12.22-RDS.20260514, and 11.22-RDS.20260514, each listing seven fixed CVEs (CVE-2026-6473, -6474, -6475, -6477, -6478, -6479, -6637) and updated postgis and pglogical extensions.

Security assessment

The diff explicitly documents new engine versions that fix a set of named CVEs, providing concrete evidence of vulnerability remediation for PostgreSQL 11/12/13 Extended Support, along with extension updates (postgis, pglogical) that may carry their own security fixes.

Evidence

+  * [CVE-2026-6473](https://nvd.nist.gov/vuln/detail/CVE-2026-6473)

Diff

diff --git a/AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-extendedsupport.md b/AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-extendedsupport.md
index daab81d..3ff5ed6 100644
--- a//AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-extendedsupport.md
+++ b//AmazonRDS/latest/PostgreSQLReleaseNotes/postgresql-extendedsupport.md
@@ -27,0 +28,2 @@ Learn about the Amazon RDS Extended Support updates below.
+  * Amazon RDS Extended Support version 13.23-RDS.20260514
+
@@ -32,0 +35,32 @@ Learn about the Amazon RDS Extended Support updates below.
+### Amazon RDS Extended Support version 13.23-RDS.20260514
+
+RDS Extended Support version 13.23-RDS.20260514 is now available.
+
+###### CVEs fixed:
+
+  * [CVE-2026-6473](https://nvd.nist.gov/vuln/detail/CVE-2026-6473)
+
+  * [CVE-2026-6474](https://nvd.nist.gov/vuln/detail/CVE-2026-6474)
+
+  * [CVE-2026-6475](https://nvd.nist.gov/vuln/detail/CVE-2026-6475)
+
+  * [CVE-2026-6477](https://nvd.nist.gov/vuln/detail/CVE-2026-6477)
+
+  * [CVE-2026-6478](https://nvd.nist.gov/vuln/detail/CVE-2026-6478)
+
+  * [CVE-2026-6479](https://nvd.nist.gov/vuln/detail/CVE-2026-6479)
+
+  * [CVE-2026-6637](https://nvd.nist.gov/vuln/detail/CVE-2026-6637)
+
+
+
+
+###### Extensions updated:
+
+  * The `postgis` extension was updated to version 3.4.6. 
+
+  * The `pglogical` extension was updated to version 2.4.8. 
+
+
+
+
@@ -53,0 +88,2 @@ RDS Extended Support version 13.23-RDS.20260224 is now available.
+  * Amazon RDS Extended Support version 12.22-RDS.20260514
+
@@ -66,0 +103,32 @@ RDS Extended Support version 13.23-RDS.20260224 is now available.
+### Amazon RDS Extended Support version 12.22-RDS.20260514
+
+RDS Extended Support version 12.22-RDS.20260514 is now available.
+
+###### CVEs fixed:
+
+  * [CVE-2026-6473](https://nvd.nist.gov/vuln/detail/CVE-2026-6473)
+
+  * [CVE-2026-6474](https://nvd.nist.gov/vuln/detail/CVE-2026-6474)
+
+  * [CVE-2026-6475](https://nvd.nist.gov/vuln/detail/CVE-2026-6475)
+
+  * [CVE-2026-6477](https://nvd.nist.gov/vuln/detail/CVE-2026-6477)
+
+  * [CVE-2026-6478](https://nvd.nist.gov/vuln/detail/CVE-2026-6478)
+
+  * [CVE-2026-6479](https://nvd.nist.gov/vuln/detail/CVE-2026-6479)
+
+  * [CVE-2026-6637](https://nvd.nist.gov/vuln/detail/CVE-2026-6637)
+
+
+
+
+###### Extensions updated:
+
+  * The `postgis` extension was updated to version 3.4.6. 
+
+  * The `pglogical` extension was updated to version 2.4.8. 
+
+
+
+
@@ -146,0 +215,2 @@ RDS Extended Supportt version 12.22-RDS.20250220 is now available.
+  * Amazon RDS Extended Support version 11.22-RDS.20260514
+
@@ -167,0 +238,32 @@ RDS Extended Supportt version 12.22-RDS.20250220 is now available.
+### Amazon RDS Extended Support version 11.22-RDS.20260514
+
+RDS Extended Support version 11.22-RDS.20260514 is now available.
+
+###### CVEs fixed:
+
+  * [CVE-2026-6473](https://nvd.nist.gov/vuln/detail/CVE-2026-6473)
+
+  * [CVE-2026-6474](https://nvd.nist.gov/vuln/detail/CVE-2026-6474)
+
+  * [CVE-2026-6475](https://nvd.nist.gov/vuln/detail/CVE-2026-6475)
+
+  * [CVE-2026-6477](https://nvd.nist.gov/vuln/detail/CVE-2026-6477)
+
+  * [CVE-2026-6478](https://nvd.nist.gov/vuln/detail/CVE-2026-6478)
+
+  * [CVE-2026-6479](https://nvd.nist.gov/vuln/detail/CVE-2026-6479)
+
+  * [CVE-2026-6637](https://nvd.nist.gov/vuln/detail/CVE-2026-6637)
+
+
+
+
+###### Extensions updated:
+
+  * The `postgis` extension was updated to version 3.3.10. 
+
+  * The `pglogical` extension was updated to version 2.4.8. 
+
+
+
+