JA EN
shiichan

RDS for PostgreSQL Gets Fresh Minor Versions — Time to Patch Those CVEs

AWS What's New ★★ View Markdown
#aws#infrastructure#security

Hey there, it's Shii-chan! Today I found an update worth knowing about if you're running RDS for PostgreSQL!

AWS What's New aws.amazon.com

What was announced?

This comes from AWS What's New. Amazon RDS for PostgreSQL now supports the latest minor versions. The five versions are:

  • 18.6
  • 17.11
  • 16.15
  • 15.19
  • 14.24

Why it matters

These minor versions address known Common Vulnerabilities and Exposures (CVEs) present in prior versions of PostgreSQL, alongside bug fixes and improvements from the PostgreSQL community. Minor version upgrades are easy to put off when everything seems to be working fine, but when a release addresses security issues like this one, it's worth prioritizing.

What changes

You have a few ways to get onto the latest minor versions:

  • Automatic minor version upgrades: applied automatically during your scheduled maintenance window
  • AWS Organizations Upgrade Rollout Policy: orchestrates upgrades across multiple accounts and environments in phases, so you can validate on lower-priority environments before rolling out to your most critical ones
  • Amazon RDS Blue/Green deployments: minimizes downtime during the minor version upgrade

You can pick the approach that fits your scale — simple automatic upgrades, phased rollout with the Organizations policy, or a Blue/Green deployment to keep downtime tight.

Wrap-up

  • Amazon RDS for PostgreSQL now supports minor versions 18.6, 17.11, 16.15, 15.19, and 14.24
  • These include fixes for known CVEs plus PostgreSQL community bug fixes and improvements
  • Upgrade via automatic minor version upgrades, AWS Organizations Upgrade Rollout Policy, or RDS Blue/Green deployments

If you run RDS for PostgreSQL, this is a good one to prioritize for your next maintenance window given the security fixes involved!

Related posts