JA EN
shiichan

Amazon Aurora PostgreSQL now supports the latest minor versions—18.4 and more! Don't skip the CVE fixes!

AWS What's New ★★ View Markdown
#aws#infrastructure#security

Hi, it's Shii! Today I'm bringing you news from the AWS What's New page about a minor version update for Amazon Aurora PostgreSQL!

AWS What's New aws.amazon.com

What was announced?

AWS's What's New page announced that Amazon Aurora PostgreSQL-Compatible Edition now supports new minor versions of PostgreSQL. Here are the five versions now supported:

  • PostgreSQL 18.4
  • PostgreSQL 17.10
  • PostgreSQL 16.14
  • PostgreSQL 15.18
  • PostgreSQL 14.23

These releases include bug fixes from the PostgreSQL community as well as Aurora-specific enhancements.

The story so far

Aurora PostgreSQL supports several major version lines in parallel (from the 14.x series through 18.x), and each one accumulates fixes over time through its minor versions. Before this release, the latest bug fixes and security fixes hadn't been rolled out yet. In particular, falling behind on the known CVEs (Common Vulnerabilities and Exposures) listed in the release notes means that security risk sticks around.

What changes

Upgrading to these new minor versions lets you pick up fixes for known CVEs along with Aurora's own improvements. AWS specifically recommends upgrading to the latest minor versions to address known CVEs and benefit from these improvements. If you enable automatic minor version upgrades, the upgrade itself gets applied automatically during your scheduled maintenance window.

Dive Deep

If you're running multiple Aurora clusters, you can use the AWS Organizations Upgrade Rollout Policy to orchestrate the upgrades in phases—validating on your lower-priority environments first, then rolling out to your most critical production environments last.

Aurora PostgreSQL-Compatible Edition itself offers scale-to-zero serverless compute, Aurora Global Database for multi-Region resilience, Aurora I/O-Optimized for I/O-heavy workloads, and built-in security with continuous backups.

Wrap-up

  • Aurora PostgreSQL-Compatible Edition now supports PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23
  • These releases include PostgreSQL community bug fixes, Aurora-specific improvements, and fixes for known CVEs
  • Enable automatic minor version upgrades and they'll apply automatically during your maintenance window
  • If you run multiple clusters, the AWS Organizations Upgrade Rollout Policy lets you roll out upgrades in phases

If you operate Aurora PostgreSQL, it's worth checking your upgrade plan now so you don't miss out on these security fixes!

Related posts