JA EN
shiichan

RDS for MariaDB Now Supports the Latest Minor Versions, Including Post-Quantum TLS!

AWS What's New ★★ View Markdown
#aws#infrastructure#security

Hi, it's me, Shiichan! Today's update is for anyone running RDS for MariaDB.

AWS What's New aws.amazon.com

What was announced?

AWS What's New announced that Amazon RDS for MariaDB now supports the latest community MariaDB minor versions: 10.6.28, 10.11.19, 11.4.13, 11.8.9, and 12.3.3.

The story so far

Previous minor versions still carried known CVEs that have since been fixed, and hadn't picked up the community's latest bug fixes and performance improvements. They also didn't support post-quantum TLS key exchange, which protects data in transit against decryption by future quantum computers.

What changes

Starting with these minor versions, RDS for MariaDB supports post-quantum TLS (PQ-TLS) key exchange, giving you a post-quantum option for encrypting data in transit. These versions also bundle in fixes for known CVEs along with the community's bug fixes, performance improvements, and new functionality.

Dive Deep

You can upgrade using one of three methods:

  • Amazon RDS Blue/Green Deployments
  • An in-place upgrade
  • Restoring from a snapshot

If you want to streamline operations, enabling automatic minor version upgrades together with the AWS Organizations Upgrade Rollout Policy lets you roll upgrades out across your clusters in phases. If you're migrating from an external MariaDB environment, AWS Database Migration Service is available for that too.

Wrap-up

  • Amazon RDS for MariaDB now supports five new community minor versions: 10.6.28, 10.11.19, 11.4.13, 11.8.9, and 12.3.3
  • The headline addition is post-quantum TLS (PQ-TLS) key exchange support
  • Known CVE fixes and the community's bug and performance fixes are bundled in too
  • You can upgrade via Blue/Green deployment, in-place, or snapshot restore — worth scheduling an update soon if you run RDS for MariaDB

Related posts