Vulnerability Fixing Policies

RDS for MySQL Vulnerability Fixing SLA

• High-risk vulnerabilities

  After the MySQL community detects vulnerabilities and releases fixing solutions, RDS for MySQL analyzes all the vulnerabilities. If any high-risk vulnerability is identified, RDS for MySQL will proactively release warnings and upgrade the version within one month.

• Other vulnerabilities

  Other vulnerabilities can be fixed through a normal upgrade. For details, see RDS for MySQL Kernel Release History.

RDS for PostgreSQL Vulnerability Fixing SLA

• High-risk vulnerabilities

  After the PostgreSQL community detects vulnerabilities and releases fixing solutions, RDS for PostgreSQL analyzes all the vulnerabilities. If any high-risk vulnerability is identified, RDS for PostgreSQL will proactively release warnings and upgrade the version within one month.

• Other vulnerabilities

  Other vulnerabilities can be fixed through a normal upgrade. For details, see RDS for PostgreSQL Kernel Release History.

Fixing Statement

To prevent customers from being exposed to unexpected risks, RDS does not provide other information about vulnerabilities except vulnerability background, details, technical analysis, affected functions/versions/scenarios, solutions, and reference information.