RDS for PostgreSQL disables new installations of certain extensions on specific minor engine versions as part of an ongoing security review. When a security risk is identified in an extension, RDS blocks CREATE EXTENSION for that extension on the affected minor engine version. Some extensions are restricted on all major and minor engine versions and cannot be created even after an upgrade. For other extensions, upgrade to the latest minor engine version to use them after the vulnerable extensions are optimized.
Already-created extensions are not affected. Only new CREATE EXTENSION calls are blocked on affected versions.
Extensions restricted on all versions
The following extensions pose security risks and are restricted on all major and minor engine versions of RDS for PostgreSQL. Upgrading the minor engine version does not restore the ability to create them.
| Restricted extension | Alternative |
|---|---|
|
|
Generate embeddings by calling a model service from your application, and then write the vectors to the database. To store and query vectors, use the |
|
|
Rewrite business logic that depends on Oracle-compatible functions by using native PostgreSQL SQL syntax or user-defined functions. |
|
|
None |
List of restricted extensions
The following extensions are restricted only on the minor engine versions listed below. To create them, upgrade your instance to a minor engine version where the extension is not restricted.
PostgreSQL 18
| Minor engine version | Disabled extensions |
|---|---|
| 20251130 and earlier | plperl |
PostgreSQL 17
| Minor engine version | Disabled extensions |
|---|---|
| 20241030 and earlier | plperl |
PostgreSQL 16
| Minor engine version | Disabled extensions |
|---|---|
| 20231030 to 20241030 | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility, pg_cron, plperl |
| 20241230 to 20250228 | pg_cron |
| 20250430 and later | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility |
PostgreSQL 14 to 15
| Minor engine version | Disabled extensions |
|---|---|
| 20230228 and earlier | cube, earthdistance, ganos_geometry, ganos_geometry_sfcgal, ganos_geometry_topology, ganos_networking, ganos_pointcloud, ganos_pointcloud_geometry, ganos_raster, ganos_scene, ganos_sfmesh, ganos_spatialref, ganos_trajectory, ganos_utility, hstore, hypopg, index_adviser, intarray, ltree, madlib, pg_bigm, pg_cron, pg_profile, pg_stat_kcache, pglogical, pldebugger, plperl, postgis, postgis_sfcgal, postgis_tiger_geocoder, postgis_topology, timescaledb, zhparser, zombodb |
| 20230330 to 20230630 | ganos_geometry, ganos_geometry_sfcgal, ganos_vomesh, pg_partman, pgbouncer_fdw, pljava, postgis, postgis_raster, timescaledb |
| 20230830 to 20241030 | plperl |
| 20241230 to 20250228 | pg_cron |
| 20250430 and later | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility |
PostgreSQL 13
| Minor engine version | Disabled extensions |
|---|---|
| 20230228 and earlier | cube, earthdistance, ganos_geometry, ganos_geometry_sfcgal, ganos_geometry_topology, ganos_networking, ganos_pointcloud, ganos_pointcloud_geometry, ganos_raster, ganos_scene, ganos_sfmesh, ganos_spatialref, ganos_trajectory, ganos_utility, hstore, hypopg, index_adviser, intarray, ltree, madlib, pg_bigm, pg_cron, pg_profile, pg_stat_kcache, pglogical, pldebugger, plperl, postgis, postgis_sfcgal, postgis_tiger_geocoder, postgis_topology, timescaledb, zhparser, zombodb |
| 20230330 to 20230630 | ganos_geometry, ganos_geometry_sfcgal, ganos_vomesh, pg_partman, pg_pathman, pgbouncer_fdw, pljava, postgis, postgis_raster |
| 20230830 to 20250228 | pg_cron |
| 20250430 and later | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility |
PostgreSQL 12
| Minor engine version | Disabled extensions |
|---|---|
| 20230228 and earlier | cube, earthdistance, ganos_geometry, ganos_geometry_sfcgal, ganos_geometry_topology, ganos_networking, ganos_pointcloud, ganos_pointcloud_geometry, ganos_raster, ganos_scene, ganos_sfmesh, ganos_spatialref, ganos_trajectory, ganos_utility, hstore, hypopg, index_adviser, intarray, ltree, madlib, pg_bigm, pg_cron, pg_profile, pg_stat_kcache, pglogical, pldebugger, plperl, postgis, postgis_sfcgal, postgis_tiger_geocoder, postgis_topology, timescaledb, zhparser, zombodb |
| 20230330 to 20230630 | ganos_geometry, ganos_geometry_sfcgal, ganos_vomesh, madlib, pg_partman, pg_pathman, pgbouncer_fdw, pljava, postgis, postgis_raster |
| 20230830 to 20241030 | plperl |
| 20241230 to 20250228 | pg_cron |
| 20250430 and later | ganos_utility, ganos_sfmesh, ganos_raster, ganos_scene, ganos_trajectory, madlib |
PostgreSQL 11
| Minor engine version | Disabled extensions |
|---|---|
| 20230228 and earlier | cube, earthdistance, ganos_geometry, ganos_geometry_sfcgal, ganos_geometry_topology, ganos_networking, ganos_pointcloud, ganos_pointcloud_geometry, ganos_raster, ganos_scene, ganos_sfmesh, ganos_spatialref, ganos_trajectory, ganos_utility, hstore, hypopg, index_adviser, intarray, ltree, madlib, pg_bigm, pg_cron, pg_profile, pg_stat_kcache, pglogical, pldebugger, postgis, postgis_sfcgal, postgis_tiger_geocoder, postgis_topology, timescaledb, zhparser, zombodb |
| 20230330 to 20230630 | ganos_geometry, ganos_geometry_sfcgal, ganos_vomesh, madlib, pg_pathman, pgbouncer_fdw, pljava, postgis, postgis_raster |
| 20230830 to 20250228 | pg_cron |
| 20250430 and later | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility |
PostgreSQL 10
| Minor engine version | Disabled extensions |
|---|---|
| 20230228 and earlier | cube, earthdistance, ganos_geometry, ganos_geometry_sfcgal, ganos_geometry_topology, ganos_networking, ganos_pointcloud, ganos_pointcloud_geometry, ganos_raster, ganos_scene, ganos_sfmesh, ganos_spatialref, ganos_trajectory, ganos_utility, hstore, hypopg, index_adviser, intarray, ltree, madlib, pg_bigm, pg_cron, pg_profile, pg_stat_kcache, pglogical, pldebugger, postgis, postgis_sfcgal, postgis_tiger_geocoder, postgis_topology, timescaledb, zhparser, zombodb |
| 20230330 to 20230630 | ganos_geometry, ganos_geometry_sfcgal, ganos_vomesh, pg_pathman, pljava, postgis, postgis_raster |
| 20230830 and later | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility, pg_cron |
Impacts
-
Existing extensions: If you created an extension before it was restricted, it continues to work. No action is needed.
-
New installations blocked: If you have not yet created a restricted extension — or if you created it and later dropped it —
CREATE EXTENSIONfails on affected minor engine versions. To use the extension, upgrade your instance to a minor engine version where the extension is not restricted. -
Extensions restricted on all versions: For extensions restricted on all versions, upgrading the minor engine version does not restore the ability to create them. If you have not created such an extension, or if you dropped it, use the corresponding alternative.
Related topics
To query your current minor engine version or upgrade to a later one, see Update the minor engine version.