RDS for PostgreSQL disables new installations of certain extensions on specific minor engine versions as part of an ongoing security review. When a security risk is identified in an extension, RDS blocks CREATE EXTENSION for that extension on the affected minor engine version. After the vulnerable extensions are optimized, upgrade to the latest minor engine version to use them.
Already-created extensions are not affected. Only new CREATE EXTENSION calls are blocked on affected versions.
List of restricted extensions
PostgreSQL 18
| Minor engine version | Disabled extensions |
|---|---|
| 20251130 and earlier | plperl, plv8 |
| 20251130 and later | plv8 |
PostgreSQL 17
| Minor engine version | Disabled extensions |
|---|---|
| 20241030 and earlier | plperl, plv8 |
| 20241230 and later | plv8 |
PostgreSQL 16
| Minor engine version | Disabled extensions |
|---|---|
| 20231030 to 20241030 | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility, pg_cron, plperl, plv8 |
| 20241230 to 20250228 | pg_cron |
| 20250430 and later | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility, orafce, plv8 |
PostgreSQL 14 to 15
| Minor engine version | Disabled extensions |
|---|---|
| 20230228 and earlier | cube, earthdistance, ganos_geometry, ganos_geometry_sfcgal, ganos_geometry_topology, ganos_networking, ganos_pointcloud, ganos_pointcloud_geometry, ganos_raster, ganos_scene, ganos_sfmesh, ganos_spatialref, ganos_trajectory, ganos_utility, hstore, hypopg, index_adviser, intarray, ltree, madlib, orafce, pg_bigm, pg_cron, pg_profile, pg_stat_kcache, pglogical, pldebugger, plperl, plv8, postgis, postgis_sfcgal, postgis_tiger_geocoder, postgis_topology, timescaledb, zhparser, zombodb |
| 20230330 to 20230630 | ganos_geometry, ganos_geometry_sfcgal, ganos_vomesh, pg_partman, pgbouncer_fdw, pljava, postgis, postgis_raster, timescaledb |
| 20230830 to 20241030 | plperl |
| 20241230 to 20250228 | pg_cron |
| 20250430 and later | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility, orafce, plv8 |
PostgreSQL 13
| Minor engine version | Disabled extensions |
|---|---|
| 20230228 and earlier | cube, earthdistance, ganos_geometry, ganos_geometry_sfcgal, ganos_geometry_topology, ganos_networking, ganos_pointcloud, ganos_pointcloud_geometry, ganos_raster, ganos_scene, ganos_sfmesh, ganos_spatialref, ganos_trajectory, ganos_utility, hstore, hypopg, index_adviser, intarray, ltree, madlib, orafce, pg_bigm, pg_cron, pg_profile, pg_stat_kcache, pglogical, pldebugger, plperl, plv8, postgis, postgis_sfcgal, postgis_tiger_geocoder, postgis_topology, timescaledb, zhparser, zombodb |
| 20230330 to 20230630 | ganos_geometry, ganos_geometry_sfcgal, ganos_vomesh, pg_partman, pg_pathman, pgbouncer_fdw, pljava, postgis, postgis_raster |
| 20230830 to 20250228 | pg_cron |
| 20250430 and later | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility, plv8 |
PostgreSQL 12
| Minor engine version | Disabled extensions |
|---|---|
| 20230228 and earlier | cube, earthdistance, ganos_geometry, ganos_geometry_sfcgal, ganos_geometry_topology, ganos_networking, ganos_pointcloud, ganos_pointcloud_geometry, ganos_raster, ganos_scene, ganos_sfmesh, ganos_spatialref, ganos_trajectory, ganos_utility, hstore, hypopg, index_adviser, intarray, ltree, madlib, orafce, pg_bigm, pg_cron, pg_profile, pg_stat_kcache, pglogical, pldebugger, plperl, plv8, postgis, postgis_sfcgal, postgis_tiger_geocoder, postgis_topology, timescaledb, zhparser, zombodb |
| 20230330 to 20230630 | ganos_geometry, ganos_geometry_sfcgal, ganos_vomesh, madlib, pg_partman, pg_pathman, pgbouncer_fdw, pljava, postgis, postgis_raster |
| 20230830 to 20241030 | plperl |
| 20241230 to 20250228 | pg_cron |
| 20250430 and later | ganos_utility, ganos_sfmesh, ganos_raster, ganos_scene, ganos_trajectory, madlib |
PostgreSQL 11
| Minor engine version | Disabled extensions |
|---|---|
| 20230228 and earlier | cube, earthdistance, ganos_geometry, ganos_geometry_sfcgal, ganos_geometry_topology, ganos_networking, ganos_pointcloud, ganos_pointcloud_geometry, ganos_raster, ganos_scene, ganos_sfmesh, ganos_spatialref, ganos_trajectory, ganos_utility, hstore, hypopg, index_adviser, intarray, ltree, madlib, orafce, pg_bigm, pg_cron, pg_profile, pg_stat_kcache, pglogical, pldebugger, plv8, postgis, postgis_sfcgal, postgis_tiger_geocoder, postgis_topology, timescaledb, zhparser, zombodb |
| 20230330 to 20230630 | ganos_geometry, ganos_geometry_sfcgal, ganos_vomesh, madlib, pg_pathman, pgbouncer_fdw, pljava, postgis, postgis_raster |
| 20230830 to 20250228 | pg_cron |
| 20250430 and later | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility, orafce, plv8 |
PostgreSQL 10
| Minor engine version | Disabled extensions |
|---|---|
| 20230228 and earlier | cube, earthdistance, ganos_geometry, ganos_geometry_sfcgal, ganos_geometry_topology, ganos_networking, ganos_pointcloud, ganos_pointcloud_geometry, ganos_raster, ganos_scene, ganos_sfmesh, ganos_spatialref, ganos_trajectory, ganos_utility, hstore, hypopg, index_adviser, intarray, ltree, madlib, orafce, pg_bigm, pg_cron, pg_profile, pg_stat_kcache, pglogical, pldebugger, plv8, postgis, postgis_sfcgal, postgis_tiger_geocoder, postgis_topology, timescaledb, zhparser, zombodb |
| 20230330 to 20230630 | ganos_geometry, ganos_geometry_sfcgal, ganos_vomesh, pg_pathman, pljava, postgis, postgis_raster |
| 20230830 and later | ganos_raster, ganos_scene, ganos_sfmesh, ganos_trajectory, ganos_utility, orafce, pg_cron, plv8 |
Impacts
Existing extensions: If you created an extension before it was restricted, it continues to work. No action is needed.
New installations blocked: If you have not yet created a restricted extension — or if you created it and later dropped it —
CREATE EXTENSIONfails on affected minor engine versions. To use the extension, upgrade your instance to a minor engine version where the extension is not restricted.
Related topics
To query your current minor engine version or upgrade to a later one, see Update the minor engine version.