Skip to content

Latest commit

 

History

History
861 lines (703 loc) · 66.5 KB

CHANGELOG.md

File metadata and controls

861 lines (703 loc) · 66.5 KB
Raw

Changelog

Notable changes since version 42.0.0, read the complete History of Changes.

The format is based on Keep a Changelog.

Unreleased

Changed

Added

Fixed

[42.7.2] (2024-02-21 08:23:00 -0500)

Security

  • security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a - such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment. This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.

Changed

  • fix: Use simple query for isValid. Using Extended query sends two messages checkConnectionQuery was never ever set or used, removed PR #3101
  • perf: Avoid autoboxing bind indexes by @bokken in PR #1244
  • refactor: Document that encodePassword will zero out the password array, and remove driver's default encodePassword by @vlsi in PR #3084

Added

  • feat: Add PasswordUtil for encrypting passwords client side PR #3082

[42.7.1] (2023-12-06 08:34:00 -0500)

Changed

  • perf: improve performance of PreparedStatement.setBlob, BlobInputStream, and BlobOutputStream with dynamic buffer sizing PR #3044

Fixed

  • fix: Apply connectTimeout before SSLSocket.startHandshake to avoid infinite wait in case the connection is broken PR #3040
  • fix: support waffle-jna 2.x and 3.x by using reflective approach for ManagedSecBufferDesc PR #2720 Fixes Issue #2690.
  • fix: NoSuchMethodError on ByteBuffer#position When Running on Java 8 when accessing arrays, fixes Issue #3014
  • Revert "PR #2925 Use canonical DateStyle name" PR #3035 Fixes Issue #3008
  • Revert "PR ##2973 feat: support SET statements combining with other queries with semicolon in PreparedStatement" PR #3010 Fixes Issue #3007
  • fix: avoid timezone conversions when sending LocalDateTime to the database #2852 Fixes Issue #1390 ,Issue #2850 Closes [Issue #1391(pgjdbc#1391)

[42.7.0] (2023-11-20 09:33:00 -0500)

Changed

  • fix: Deprecate for removal PGPoint.setLocation(java.awt.Point) to cut dependency to java.desktop module. PR #2967
  • feat: return all catalogs for getCatalogs metadata query closes ISSUE #2949 PR #2953
  • feat: support SET statements combining with other queries with semicolon in PreparedStatement PR ##2973

Fixed

  • chore: add styleCheck Gradle task to report style violations PR #2980
  • fix: Include currentXid in "Error rolling back prepared transaction" exception message PR #2978
  • fix: add varbit as a basic type inside the TypeInfoCache PR #2960
  • fix: Fix failing tests for version 16. PR #2962
  • fix: allow setting arrays with ANSI type name PR #2952
  • feat: Use KeepAlive to confirm LSNs PR #2941
  • fix: put double ' around log parameter PR #2936 fixes ISSUE #2935
  • fix: Fix Issue #2928 number of ports not equal to number of servers in datasource PR #2929
  • fix: Use canonical DateStyle name (#2925) fixes pgbouncer issue
  • fix: Method getFastLong should be able to parse all longs PR #2881
  • docs: Fix typos in info.html PR #2860
  • fix: Return correct default from PgDatabaseMetaData.getDefaultTransactionIsolation PR #2992 fixes Issue #2991
  • test: fix assertion in RefCursorFetchTestultFetchSize rows
  • test: use try-with-resources in LogicalReplicationStatusTest

[42.6.0] (2023-03-17 15:34:34 -0400)

Changed

  • fix: use PhantomReferences instead of Obejct.finalize() to track Connection leaks PR #2847

    The change replaces all uses of Object.finalize with PhantomReferences. The leaked resources (Connections) are tracked in a helper thread that is active as long as there are connections in use. By default, the thread keeps running for 30 seconds after all the connections are released. The timeout is set with pgjdbc.config.cleanup.thread.ttl system property.

  • refactor:(loom) replace the usages of synchronized with ReentrantLock PR #2635 Fixes Issue #1951

[42.5.4] (2023-02-15 10:21:04 -0500)

Fixed

  • fix: fix testGetSQLTypeQueryCache by searching for xid type. We used to search for box type but it is now cached. xid is not cached, this nuance is required for the test.
  • fix OidValueCorrectnessTest BOX_ARRAY OID, by adding BOX_ARRAY to the oidTypeName map [PR #2810]((pgjdbc#2810).
  • fixes Issue #2804.
  • fix: Make sure that github CI runs tests on all PRs #2809.

[42.5.3] (2023-02-03 08:24:50 -0500)

Fixed

[42.5.2] (2023-01-31 14:30:46 -0500)

Changed

  • regression: This release has 2 known regressions which make it unusable see the notes above. We advise people to use 42.5.3 instead.
  • docs: specify that timeouts are in seconds and there is a maximum. Housekeeping on some tests fixes #Issue 2671 PR #2686
  • docs: clarify binaryTransfer and add it to README PR# 2698
  • docs: Document the need to encode reserved characters in the connection URL PR #2700
  • feat: Define binary transfer for custom types dynamically/automatically fixes Issue #2554 PR #2556

Added

  • fix: added gssResponseTimeout as part of PR #2687 to make sure we don't wait forever on a GSS RESPONSE

Fixed

  • fix: Ensure case of XML tags in Maven snippet is correct PR #2682
  • fix: Make sure socket is closed if an exception is thrown in createSocket fixes Issue #2684 PR #2685
  • fix: Apply patch from Issue #2683 to fix hanging ssl connections PR #2687
  • fix - binary conversion of (very) long numeric values (longer than 4 * 2^15 digits) PR #2697 fixes Issue #2695
  • minor: enhance readability connection of startup params PR #2705

[42.5.1] (2022-11-23 10:14:59 -0500)

Security

  • security: StreamWrapper spills to disk if setText, or setBytea sends very large Strings or arrays to the server. createTempFile creates a file which can be read by other users on unix like systems (Not macos). This has been fixed in this version fixes CVE-2022-41946 see the security advisory for more details. Reported by Jonathan Leitschuh This has been fixed in versions 42.5.1, 42.4.3 42.3.8, 42.2.27.jre7. Note there is no fix for 42.2.26.jre6. See the security advisory for work arounds.

Fixed

  • fix: make sure we select array_in from pg_catalog to avoid duplicate array_in functions fixes #Issue 2548 PR #2552
  • fix: binary decoding of bool values PR #2640
  • perf: improve performance of PgResultSet getByte/getShort/getInt/getLong for float-typed columns PR #2634
  • chore: fix various spelling errors PR #2592
  • chore: Feature/urlparser improve URLParser PR #2641

42.5.0 (2022-08-23 11:20:11 -0400)

Changed

42.4.2 (2022-08-17 10:33:40 -0400)

Changed

  • fix: add alias to the generated getUDT() query for clarity (PR #2553)[pgjdbc#2553]

Added

  • fix: make setObject accept UUID array PR #2587

Fixed

  • fix: regression with GSS. Changes introduced to support building with Java 17 caused failures Issue #2588
  • fix: set a timeout to get the return from requesting SSL upgrade. PR #2572
  • feat: synchronize statement executions (e.g. avoid deadlock when Connection.isValid is executed from concurrent threads)

42.4.1 (2022-08-01 16:24:20 -0400)

Security

  • fix: CVE-2022-31197 Fixes SQL generated in PgResultSet.refresh() to escape column identifiers so as to prevent SQL injection.
    • Previously, the column names for both key and data columns in the table were copied as-is into the generated SQL. This allowed a malicious table with column names that include statement terminator to be parsed and executed as multiple separate commands.
    • Also adds a new test class ResultSetRefreshTest to verify this change.
    • Reported by Sho Kato

Changed

  • chore: skip publishing pgjdbc-osgi-test to Central
  • chore: bump Gradle to 7.5
  • test: update JUnit to 5.8.2

Added

  • chore: added Gradle Wrapper Validation for verifying gradle-wrapper.jar
  • chore: added "permissions: contents: read" for GitHub Actions to avoid unintentional modifications by the CI
  • chore: support building pgjdbc with Java 17
  • feat: synchronize statement executions (e.g. avoid deadlock when Connection.isValid is executed from concurrent threads)

42.4.0 (2022-06-09 08:14:02 -0400)

Changed

  • fix: added GROUP_STARTUP_PARAMETERS boolean property to determine whether or not to group startup parameters in a transaction (default=false like 42.2.x) fixes Issue #2425 pgbouncer cannot deal with transactions in statement pooling mode PR #2425

Fixed

  • fix: queries with up to 65535 (inclusive) parameters are supported now (previous limit was 32767) PR #2525, Issue #1311
  • fix: workaround JarIndex parsing issue by using groupId/artifactId-version directory namings. Regression since 42.2.13. PR #2531, issue #2527
  • fix: use Locale.ROOT for toUpperCase() toLowerCase() calls
  • doc: add Vladimir Sitnikov's PGP key
  • fix: return correct base type for domain from getUDTs PR #2520 Issue #2522
  • perf: utcTz static and renamed to UTC_TIMEZONE PR #2519
  • doc: fix release version for #2377 (it should be 42.3.6, not 42.3.5)

42.3.6 (2022-05-24 08:52:27 -0400)

Changed

Added

Fixed

  • fix: close refcursors when underlying cursor==null instead of relying on defaultRowFetchSize PR #2377

42.3.5 (2022-05-04 08:48:35 -0400)

Changed

  • test: polish TimestampUtilsTest
  • chore: use GitHub Action concurrency feature to terminate CI jobs on fast PR pushes

Added

  • Added KEYS file to allow for verifying artifacts PR 2499

Fixed

  • perf: enable tcpNoDelay by default PR 2495. This is a regression from 42.2.x versions where tcpNoDelay defaulted to true
  • docs: fix readme.md after PR 2495 PR 2496
  • feat: targetServerType=preferPrimary connection parameter PR 2483
  • fix: revert removal of toOffsetDateTime(String timestamp) fixes Issue #2497 PR 2501

42.3.4 (2022-04-01 14:16:28 -0400)

Changed

  • fix: change name of build cache PR 2471
  • feat: add support for ResultSet#getObject(OffsetTime.class) and PreparedStatement#setObject(OffsetTime.class) PR 2467
  • fix: Use non-synchronized getTimeZone in TimestampUtils PR 2451
  • docs: Fix CHANGELOG.md misformatted markdown headings PR 2461
  • docs: remove loggerLevel and loggerFile from docs and issues PR 2489
  • feat: use direct wire format -> LocalDate conversion without resorting to java.util.Date, java.util.Calendar, and default timezones PR 2464 fixes Issue #2221

Added

Fixed

  • docs: Update testing documentation PR 2446
  • fix: Throw an exception if the driver cannot parse the URL instead of returning NULL fixes Issue #2421 PR 2441
  • fix: Use PGProperty instead of the property names directly PR 2444
  • docs: update changelog, missing links at bottom and formatting PR 2460
  • fix: Remove isDeprecated from PGProperty. It was originally intended to help produce automated docs. Fixes Issue #2479 PR 2480
  • fix: change PGInterval parseISO8601Format to support fractional second PR 2457
  • fix: GSS login to use TGT from keytab fixes Issue #2469 PR 2470
  • fix: More test and fix for issues discovered by PR #2476 PR #2488

42.3.3 (2022-02-15 11:32:24 -0500)

Changed

  • fix: Removed loggerFile and loggerLevel configuration. While the properties still exist. They can no longer be used to configure the driver logging. Instead use java.util.logging configuration mechanisms such as logging.properties.

Added

Fixed

42.3.2 (2022-02-01 07:35:41 -0500)

Security

  • CVE-2022-21724 pgjdbc instantiates plugin instances based on class names provided via authenticationPluginClassName, sslhostnameverifier, socketFactory, sslfactory, sslpasswordcallback connection properties. However, the driver did not verify if the class implements the expected interface before instantiating the class. This would allow a malicious class to be instantiated that could execute arbitrary code from the JVM. Fixed in commit

Changed

  • perf: read in_hot_standby GUC on connection PR #2334
  • test: materialized view privileges PR #2209 fixes Issue #2060
  • docs: add info about convenience maven project PR #2407
  • docs: Document timezone reversal from POSIX to ISO PR #2413
  • fix: we will ask the server if it supports GSS Encryption if gssEncryption is prefer or require PR #2396 remove the need to have a ticket in the cache before asking the server if gss encryptions are supported
  • docs: remove Java 6 and 7 references from contributing PR #2385
  • style: remove Java 8 / JDBC 4.2 checks PR #2383 Remove all remaining checks whether the source is lower than Java 8 or JDBC 4.2.
  • fix: throw SQLException for #getBoolean BIT(>1) PR #2386 Throw SQLException instead of ClassCastException when calling CallableStatement#getBoolean(int) on BIT(>1).
  • style: import java.time types in more classes PR #2382 Use imports for java.time types in all remaining classes.
  • style: import java.time types in TimestampUtils PR #2380 Use imports for java.time types in TimestampUtils.
  • refactor: Change internal constructors to pass only connection Properties Changes internal constructors for PgConnection and related classes to only accept the connection properties object and remove the user and password arguments. Any locations that required those fields can retrieve them from the properties map.
  • test: Fix DatabaseMetadataTest to perform mview tests only on 9.3+
  • perf: read in_hot_standby GUC on connection PR #2334
  • doc: improv doc around binary decoding of numeric data #2331
  • Add cert key type checking to chooseClientAlias PR #2417

Added

  • feat: Add authenticationPluginClassName option to provide passwords at runtime Adds authenticationPluginClassName connection property that allows end users to specify a class that will provide the connection passwords at runtime. Users implementing that interface must ensure that each invocation of the method provides a new char[] array as the contents will be filled with zeroes by the driver after use.Call sites within the driver have been updated to use the char[] directly wherever possible. This includes direct usage in the GSS authentication code paths that internally were already converting the String password into a char[] for internal usage. This allows configuring a connection with a password that must be generated on the fly or periodically changes. PR #2369 original issue Issue #2102
  • feat: add tcpNoDelay option PR #2341 fixes Issue #2324
  • feat: pg_service.conf and .pgpass support (jdbc:postgresql://?service=my-service) PR #2260 fixes Issue #2278

Fixed

  • Use local TimestampUtil in PgStatement and PgResultset for thread safety PR #2291 fixes Issue #921 synchronize modification of shared calendar
  • fix: PgObject isNull() was reporting the opposite fixes Issue #2411 PR #2414
  • fix: default file name is ".pg_service.conf" on Windows (not "pg_service.conf") PR #2398 fixes Issue #2278
  • test: Fix RefCursorFetchTest on older platforms
  • fix: do not close refcursor after reading if fetchsize has been set fixes Issue #2227 PR #2371
  • fix: rework gss authentication to use the principal name to get the credentials fixes Issue #2235 PR #2352
  • fix: return getIndexInfo metadata columns in UPPER CASE PR #2368
  • fix: Connection leak in ConnectionFactoryImpl#tryConnect PR #2350 Issue #2351
  • fix: Fix For IS_AUTOGENERATED Flag PR #2348
  • fix: parsing service file tests for windows PR #2347
  • fix: The spec says that calling close() on a closed connection is a noop. PR #2345 fixes Issue #2300
  • fix: add microsecond precision to getTimestamp() called on sql TIME(6) Currently, "when fetching a value of type TIME(6) through resultSet.getTimestamp() only ms precision is retained, the microsecond fractional digits are lost." This change will retain the microsecond precision when .getTimestamp() is called on TIME(6). PR #2181 Closes Issue #1537
  • test: materialized view privileges PR #2209 add and drop a materialized view Add to TestUtil and also to DatabaseMetaData setup and teardown fixes Issue #2060
  • fix: typo in connect.md PR #2338 OutOfMemoryException => OutOfMemoryError
  • fix: use local TimestampUtil in PgStatement and PgResultset for thread safety TimestampUtil is not thread safe. It raises exceptions when multiple threads use ResultSets of one connection. PR #2291 fixes Issue #921 If PgStatement and PgResultSet use their own TimestampUtil no synchronize is needed.
  • fix: typo in CONTRIBUTING.md PR #2332 seccion => section

42.3.1 (2021-10-29)

Changed

  • improv: Arrays in Object[] PR 2330 when an Object[] contains other arrays, treat as though it were a multi-dimensional array the one exception is byte[], which is not supported.
  • improv: Use jre utf-8 decoding PR 2317 Remove use of custom utf-8 decoding.
  • perf: improve performance of bytea string decoding PR 2320 improve the parsing of bytea hex encoded string by making a lookup table for each of the valid ascii code points to the 4 bit numeric value
  • feat: intern/canonicalize common strings PR 2234

Added

Fixed

  • numeric binary decode for even 10 thousands PR #2327 fixes Issue 2326 binary numeric values which represented integers multiples of 10,000 from 10,000-9,990,000 were not decoded correctly
  • [typo] typo in certdir/README.md PR #2309 certificatess => certificates
  • [typo] typo in TimestampUtils.java PR #2314 Change Greagorian to Gregorian.
  • remove check for negative pid in cancel request. Apparently pgbouncer can send one fixes Issue 2317 PR #2319

42.3.0 (2021-10-18)

Changed

  • No longer build for Java 6 or Java 7
  • If assumeMinServerVersion is not defined and server is at least 9.0, group startup statements into a single transaction PR #1977

Added

  • Support for pg_service.conf file and jdbc URL syntax: "jdbc:postgresql://?service=service1". Resource can be provided using 1) property "-Dorg.postgresql.pgservicefile=file1" 2) environment variable PGSERVICEFILE=file2 3) default location "$HOME/.pg_service.conf" 4) environment variable PGSYSCONFDIR=dir1 looks for file "dir1/pg_service.conf".
  • Support for .pgpass file. Resource can be provided using 1) property "-Dorg.postgresql.pgpassfile=file1" 2) environment variable PGPASSFILE=file2 3) default location "$HOME/.pgpass"

Fixed

  • Rework OSGi bundle activator so it does not rely on exception message to check DataSourceFactory presence PR #507
  • Fix database metadata getFunctions() and getProcedures() to ignore search_path when no schema pattern is specified PR #2174
  • Fix refreshRow made the row readOnly. [PR #2195](pgjdbc#2195 Fixes Issue #2193
  • Fix do not add double quotes to identifiers already double quoted PR #2224 Fixes Issue #2223 Add a property QUOTE_RETURNING_IDENTIFIERS which determines if we put double quotes around identifiers that are provided in the returning array.
  • Fix Provide useful error message for empty or missing passwords for SCRAM auth PR #2290 fixes Issue #2288

42.2.24 (2021-09-23)

Fixed

  • Fix startup regressions caused by PR #1949. Instead of checking all types by OID, we can return types for well known types PR #2257
  • Backport PR #2148 Avoid leaking server error details through BatchUpdateException when logServerErrorDetail PR #2254
  • Backpatch PR #2247 QueryExecutorImpl.receiveFastpathResult did not properly handle ParameterStatus messages. This in turn caused failures for some LargeObjectManager operations. Closes Issue #2237 Fixed by adding the missing code path, based on the existing handling in processResults. PR #2253
  • Backpatch PR #2242 PgDatabaseMetaData.getIndexInfo() cast operands to smallint PR#2253 It is possible to break method PgDatabaseMetaData.getIndexInfo() by adding certain custom operators. This PR fixes it.
  • Backpatching PR #2251 into 42.2 Clean up open connections to fix test failures on omni and appveyor use older syntax for COMMENT ON FUNCTION with explicit no-arg parameter parentheses as it is required on server versions before v10. Handle cleanup of connection creation in StatementTest, handle cleanup of privileged connection in DatabaseMetaDataTest
  • Backpatch PR #2245 fixes case where duplicate tables are returned if there are duplicate descriptions oids are not guaranteed to be unique in the catalog PR #2248
  • Change to updatable result set to use correctly primary or unique keys PR #2228 fixes issues introduced in PR #2199 closes Issue #2196
  • Fix NPE calling getTypeInfo when alias is null PR #2220
  • Backpatch PR #2217 to fix Issue #2215. OIDs are unsigned integers and were not being handled correctly when they exceeded the size of signed integers

42.2.23 (2021-07-06)

Changed

  • Renewed the SSL keys for testing

Fixed

  • getColumnPrecision for Numeric when scale and precision not specified now returns 0 instead of 131089 fixes: Issue #2188
  • Calling refreshRow on an updateable resultset made the row readOnly. Fixes Issue #2193
  • results should be updateable if there is a unique index available PR#2199 Fixes Issue #2196
  • Rework sql type gathering to use OID instead of typname. This does not have the issue of name shadowing / qual-names, and has the added benefit of fixing #1948.

42.2.22 (2021-06-16)

Fixed

42.2.21 (2021-06-10)

Changed

  • Update docs to reflect deprecated DataSource API setServerName backpatch PR#2057 PR #2105

Fixed

  • make sure the table has defined primary keys when using updateable resultset backpatch PR#2101 fixes Issue 1975 PR #2106
  • backpatch PR #2143 read notifies or errors that come in asynchronously after the ready for query PR #2168
  • backpatch PR #507 which reworks OSGI bundle activator fixes ISSUE #2133
  • Fix database metadata getFunctions() and getProcedures() to ignore search_path when no schema pattern is specified. backpatch PR #2174 fixes Issue 2173

42.2.20 (2021-04-19)

Fixed

  • Partitioned indexes were not found fixes #2078 PR #2087
  • isValid() timeout should not be blocked #1943 Cherry-picked #2076 The usage of setQueryTimeout(); with the same value as the setNetworkTimeout(); is blocking the current transaction timeout. The timeouts are blocking each other with this approach.
  • DatabaseMetaData.getTables returns columns in UPPER case as per the spec PR #2092 fixes Issue #830

42.2.19 (2021-02-18)

Notable Changes

  • Now the driver uses SASLprep normalization for SCRAM authentication fixing some issues with spaces in passwords.
  • If closeOnCompletion is called on an existing statement and the statement is executed a second time it will fail.

Changed

  • Perf: avoid duplicate PGStream#changeSocket calls
  • Fix: Actually close unclosed results. Previously was not closing the first unclosed result fixes #1903 (#1905). There is a small behaviour change here as a result. If closeOnCompletion is called on an existing statement and the statement is executed a second time it will fail.

Added

  • Verify code via forbidden-apis (jdk-internal and jdk-non-portable signatures) PR #2012

Fixed

  • Fix Binary transfer for numeric fixes #1935
  • Fix Allow specifying binaryTransferEnable even for those types that are not enabled by default
  • Fix: properly set cancel socket timeout (#2044)
  • Fix "Required class information missing" when old org.jboss:jandex parses pgjdbc classes [issue 2008][pgjdbc#2008]
  • Fix PGCopyInputStream returning the last row twice when reading with CopyOut API [issue 2016][pgjdbc#2016]
  • Fix Connection.isValid() to not wait longer than existing network timeout PR #2040
  • Fix Passwords with spaces (ASCII and non-ASCII) now work with SCRAM authentication (driver now uses SASLprep normalization) PR #2052
  • Fix DatabaseMetaData.getTablePrivileges() to include views, materialized views, and foreign tables PR #2049
  • Fix Resolve ParseError in PGtokenizer fixes #2050
  • Fix return metadata privileges for views and foreign tables

42.2.18 (2020-10-15)

Fixed

  • Unfortunately changing the default of gssEncMode to ALLOW was not enough. The GSSEncMode Enum was not changed as well fixed in #1920

42.2.17 (2020-10-09)

Changed

  • Change default of gssEncMode to ALLOW. PostgreSQL can deal with PREFER but there are cloud providers that did not implement the protocol properly. Libpq gets around this by checking for a GSS credential cache before attempting the connection. This is possible in JDK 8 and up, but not JDK6, or JDK7 fixes Issue #1868 PR #1913

Added

Fixed

  • Avoid NullPointerException when receiving PGbox, PGcircle, PGline, PGlseg, PGpath, PGpoint, PGpolygon, and PGmoney [PR 1873] (pgjdbc#1873).
  • The driver returns enum and jsonb arrays elements as String objects (like in 42.2.14 and earlier versions) PR 1879.
  • PgTokenizer was ignoring last empty token PR #1882
  • Remove osgi from karaf fixes Issue #1891 PR #1902
  • Handle nulls when the following classes are used: PGbox, PGcircle, PGline, PGlseg, PGpath, PGpoint, PGpolygon, and PGmoney.

42.2.16 (2020-08-20)

Known issues

  • The driver returns enum and jsonb arrays elements are returned as PGobject instances (fixed in 42.2.17)

Fixed

  • Arrays sent in binary format are now sent as 1 based. This was a regression for multi-dimensional arrays as well as text/varchar, oid and bytea arrays. Since 42.2.0 single dimensional arrays were stored 0 based. They are now sent 1 based which is the SQL standard, and the default for Postgres when sent as strings such as '{1,2,3}'. Fixes issue 1860 in PR 1863.

42.2.15 (2020-08-14)

Known issues

  • The driver returns enum and jsonb arrays elements are returned as PGobject instances (fixed in 42.2.17)

Changed

  • Rename source distribution archive to postgresql-$version-jdbc-src.tar.gz, and add top-level archive folder ba017507
  • Add the ability to connect with a GSSAPI encrypted connection. As of PostgreSQL version 12 GSSAPI encrypted connections are possible. Now the driver will attempt to connect to the server with a GSSAPI encrypted connection. If that fails then attempt an SSL connection, finally falling back to a plain text connection. All of this is controlled using both the gssEncMode and sslMode parameters which, in concert with pg_hba.conf, determine if a particular mode is allowed and or required. PR 1821 ad921b9e
  • Source release archive shades dependencies (scram) by default. It affects only postgresql-version-src.tar.gz release artifact f0301eb9
  • Refactor decoding arrays PR 1194

Added

  • Verify nullness with CheckerFramework 6e524ae5

Fixed

  • Avoid preparedStatement leak when using updateable ResultSet via insert/update/refreshRow PR 1815 9a0d2b18
  • Change order of checks for oid vs primary keys. OID's have been deprecated. PR 1613
  • Close certificate file stream. PR 1837
  • Make sure socketTimeout is enforced PR 1831
  • Assume PKCS-8 SSL key format by default PR 1819
  • Preserve unquoted unicode whitespace in array literals PR 1266

42.2.14 (2020-06-10)

Changed

  • Reverted com.github.waffle:waffle-jna, org.osgi:org.osgi.core, org.osgi:org.osgi.enterprise dependencies to optional=true in Maven PR 1797.

42.2.13 (2020-06-04)

Notable Changes

  • Security: The primary reason to release this version and to continue the 42.2.x branch is for CVE-2020-13692. Reported by David Dworken, this is an XXE and more information can be found here. Sehrope Sarkuni reworked the XML parsing to provide a solution in commit 14b62aca4.
  • The build system has been changed to Gradle thanks to Vladimir PR 1627.
  • Regression: com.github.waffle:waffle-jna, org.osgi:org.osgi.core, org.osgi:org.osgi.enterprise dependencies are listed as non-optional issue 1975.

Changed

Added

  • jre-6 was added back to allow us to release fixes for all artifacts in the 42.2.x branch PR 1787

Fixed

  • I/O error ru translation PR 1756
  • Issue 1771 PgDatabaseMetaData.getFunctions() returns procedures fixed in PR 1774
  • getTypeMap() returning null PR 1781
  • Updated openssl example command PR 1763
  • fix documentation with ordered list to be displayed correctly PR 1783

42.2.12 (2020-03-31)

Notable changes

We have released 42.2.12 to correct regressions in this version: Specifically

  • PR 1729 was reverted as this is a breaking change
  • PR 1719 has been reverted as it introduced errors in the PgType Cache

We recommend that version 42.2.11 not be used.

Changed

  • reverted PR 1729 throw an error instead of silently rolling back a commit error. This change introduced a breaking change which will be moved to 42.3.0
  • reverted PR 1719 add support for full names of data types (#1719)

42.2.11 (2020-03-07)

Notable changes As mentioned above this version is broken and should not be used.

Changed

  • Reverted PR 1641. The driver will now wait for EOF when sending cancel signals.
  • DatabaseMetaData#getProcedures returns only procedures (not functions) for PostgreSQL 11+ PR 1723
  • Convert silent rollbacks into exception if application sends commit or xa.prepare command PR 1729

Added

  • feat: raiseExceptionOnSilentRollback connection option to configure if silent rollback should raise an exception PR 1729
  • feat: Expose ByteStreamWriter in CopyManager PR 1702
  • feat: add way to distinguish base and partitioned tables in PgDatabaseMetaData.getTables PR 1708
  • refactor: introduce tuple abstraction (rebased) PR 1701
  • refactor: make PSQLState enum consts for integrity constraint violations PR 1699
  • test: add makefile to create ssl certs PR 1706

Fixed

  • fix: Always use . as decimal separator in PGInterval PR 1705
  • fix: allow DatabaseMetaData.getColumns to describe an unset scale PR 1716

Changed

  • Build system update from Maven to Gradle PR 1627

Added

  • docker-compose image for creating test databases (see docker folder)

42.2.10 (2020-01-30)

Changed

  • (!) Regression: remove receiving EOF from backend after cancel PR 1641. The regression is that the subsequent query might receive the cancel signal.

Added

  • Add maxResultBuffer property PR 1657
  • add caller push of binary data (rebase of #953) PR 1659

Fixed

  • Cleanup PGProperty, sort values, and add some missing to docs PR 1686
  • Fixing LocalTime rounding (losing precision) PR 1570
  • Network Performance of PgDatabaseMetaData.getTypeInfo() method PR 1668
  • Issue #1680 updating a boolean field requires special handling to set it to t or f instead of true or false PR 1682
  • bug in pgstream for replication PR 1681
  • Issue #1677 NumberFormatException when fetching PGInterval with small value PR 1678
  • Metadata queries improvements with large schemas. PR 1673
  • Utf 8 encoding optimizations PR 1444
  • interval overflow PR 1658
  • Issue #1482 where the port was being added to the GSSAPI service name PR 1651
  • remove receiving EOF from backend after cancel since according to protocol the server closes the connection once cancel is sent (connection reset exception is always thrown) PR 1641
  • Unable to register out parameter Issue #1646 PR 1648

42.2.9 (2019-12-06)

Changed

Added

  • read only transactions PR 1252
  • pkcs12 key functionality PR 1599
  • new "escapeSyntaxCallMode" connection property PR 1560
  • connection property to limit server error detail in exception exceptions PR 1579
  • cancelQuery() to PGConnection public interface PR 1157
  • support for large update counts (JDBC 4.2) PR 935
  • Add Binary Support for Oid.NUMERIC and Oid.NUMERIC_ARRAY PR 1636

Fixed

  • issue 716 getTypeInfo() may not return data in the order specified in Oracle documentation PR 1506
  • PgSQLXML setCharacterStream() results in null value PR 1608
  • get correct column length for simple domains PR 1605
  • NPE as a result of calling executeQuery twice on a statement fixes issue #684 [PR 1610] (pgjdbc#1610)
  • handle numeric domain types PR 1611
  • pginterval to take iso8601 strings PR 1612
  • remove currentTimeMillis from code, tests are OK PR 1617
  • NPE when calling setNull on a PreparedStatement with no parameters PR 1620
  • allow OUT parameter registration when using CallableStatement native CALL PR 1561
  • add release save point into execute with batch PR 1583
  • Prevent use of extended query protocol for BEGIN before COPY PR 1639

42.2.8 (2019-09-13)

Changed

Added

Fixed

  • fix: Revert inet default Java type to PGObject and handle values with net masks PR 1568

42.2.7 (2019-09-03)

Changed

Added

  • Expose parameter status messages (GUC_REPORT) to the user PR 1435
  • Add automatic module name to manifest for jdk9+ PR 1538
  • Log ignoring rollback when no transaction in progress PR 1549
  • Map inet type to InetAddress PR 1527 issue 1134

Fixed

  • fix issue 1547 As long as peek returns some bytes do not reset the timeout, this allows us to continue checking until any async notifies are consumed PR 1548
  • fix: issue 1466 In logical decoding the if the backend was requesting a reply we… PR 1467
  • fix: issue 1534 Proleptic java.time support PR 1539
  • fix Ensure isValid() will not last more than timeout seconds PR 1557

42.2.6 (2019-06-19)

Known issues

  • Waffle has dropped support for 1.6, 1.7 as such the new waffle 1.9.x is only available in jre8
  • Microseconds in timestamps might be truncated when transferred in binary mode
  • 24:00 time handling is not consistent issue 1385
  • Unexpected packet type during stream replication issue 1466
  • Driver goes missing after OSGi bundle restart issue 1476

Changed

  • Change IS_GENERATED to IS_GENERATEDCOLUMN as per spec PR 1485
  • Fix missing metadata columns, and misspelled columns in PgDatabaseMetaData#getTables PR 1323

Added

  • CI tests with Java 11, and Java EA
  • Support temporary replication slots in ReplicationCreateSlotBuilder PR 1306
  • Support PostgreSQL 11, 12
  • Return function (PostgreSQL 11) columns in PgDatabaseMetaData#getFunctionColumns
  • Return information on create replication slot, now the snapshot_name is exported to allow a consistent snapshot in some uses cases. PR 1335

Fixed

  • Fixed async copy performance (1ms per op) in SSL mode PR 1314
  • Return Double.NaN for 'NaN'::numeric PR 1304
  • Performance issue in PgDatabaseMetaData#getTypeInfo with lots of types in DB PR 1302
  • PGCopyInputStream#read should cap values to [0, 255], -1 PR 1349
  • Fixes LocalDateTime handling of BC dates PR 1388
  • Release savepoints in autosave mode to prevent out of shared memory errors at the server side PR 1409
  • Fix execution with big decimal in simple query mode. PR 1463
  • Fix rounding for timestamps truncated to dates before 1970 PR 1502

42.2.5 (2018-08-27)

Known issues

Changed

  • ssl=true implies sslmode=verify-full, that is it requires valid server certificate cdeeaca4

targetServerType=master has been deprecated in favour of targetServerType=primary. master will still be accepted but not documented.

Added

  • Support for sslmode=allow/prefer/require cdeeaca4

Fixed

  • Security: added server hostname verification for non-default SSL factories in sslmode=verify-full (CVE-2018-10936) cdeeaca4
  • Updated documentation on SSL configuration fa032732
  • Updated Japanese translations PR 1275
  • IndexOutOfBounds on prepared multistatement with insert values c2885dd0

42.2.4 (2018-07-14)

Changed

  • PreparedStatement.setNull(int parameterIndex, int t, String typeName) no longer ignores the typeName argument if it is not null PR 1160

Fixed

  • Fix treatment of SQL_TSI_YEAR, SQL_TSI_WEEK, SQL_TSI_MINUTE PR 1250
  • Map integrity constraint violation to XA_RBINTEGRITY instead of XAER_RMFAIL PR 1175 f2d1352c

42.2.3 (2018-07-12)

Known issues

  • SQL_TSI_YEAR is treated as hour, SQL_TSI_WEEK is treated as hour, SQL_TSI_MINUTE is treated as second

Changed

  • Reduce the severity of the error log messages when an exception is re-thrown. The error will be thrown to caller to be dealt with so no need to log at this verbosity by pgjdbc PR 1187
  • Deprecate Fastpath API PR 903
  • Support parenthesis in {oj ...} JDBC escape syntax PR 1204
  • ubenchmark module moved pgjdbc/benchmarks repository due to licensing issues PR 1215
  • Include section on how to submit a bug report in CONTRIBUTING.md PR 951

Fixed

  • getString for PGObject-based types returned "null" string instead of null PR 1154
  • Field metadata cache can be disabled via databaseMetadataCacheFields=0 PR 1052
  • Properly encode special symbols in passwords in BaseDataSource PR 1201
  • Adjust date, hour, minute, second when rounding nanosecond part of a timestamp PR 1212
  • perf: reduce memory allocations in query cache PR 1227
  • perf: reduce memory allocations in SQL parser PR 1230, PR 1233
  • Encode URL parameters in BaseDataSource PR 1201
  • Improve JavaDoc formatting PR 1236

42.2.2 (2018-03-15)

Added

  • Documentation on server-side prepared statements PR 1135

Fixed

  • Avoid failure for insert ... on conflict...update for reWriteBatchedInserts=true case PR 1130
  • fix: allowEncodingChanges should allow set client_encoding=... PR 1125
  • Wrong data from Blob/Clob when mark/reset is used PR 971
  • Adjust XAException return codes for better compatibility with XA specification PR 782
  • Wrong results when single statement is used with different bind typesPR 1137
  • Support generated keys for WITH queries that miss RETURNING PR 1138
  • Support generated keys when INSERT/UPDATE/DELETE keyword is followed by a comment PR 1138

42.2.1 (2018-01-25)

Known issues

  • client_encoding has to be UTF8 even with allowEncodingChanges=true

Changed

  • socksProxyHost is ignored in case it contains empty string PR 1079

Fixed

  • Avoid connection failure when DateStyle is set to ISO (~PgBouncer) Issue 1080
  • Package scram:client classes, so SCRAM works when using a shaded jar PR 1091 1a89290e
  • reWriteBatchedInserts=true causes syntax error with ON CONFLICT Issue 1045 PR 1082
  • Avoid failure in getPGArrayType when stringType=unspecified PR 1036
  • For PostgreSQL 9.0+ return a complete list of keywords in DatabaseMetadata.getSQLKeywords() from pg_catalog.pg_get_keywords(). PR 940

42.2.0 (2018-01-17)

Known issues

  • SCRAM does not work as scram:client library is not packaged
  • client_encoding has to be UTF8 even with allowEncodingChanges=true

Added

  • Support SCRAM-SHA-256 for PostgreSQL 10 in the JDBC 4.2 version (Java 8+) using the Ongres SCRAM library. PR 842
  • Make SELECT INTO and CREATE TABLE AS return row counts to the client in their command tags. Issue 958 PR 962
  • Support Subject Alternative Names for SSL connections. PR 952
  • Support isAutoIncrement metadata for PostgreSQL 10 IDENTITY column. PR 1004
  • Support for primitive arrays PR#887 3e0491a
  • Implement support for get/setNetworkTimeout() in connections. PR 849
  • Make GSS JAAS login optional, add an option "jaasLogin" PR 922 see Connecting to the Database

Changed

  • Improve behaviour of ResultSet.getObject(int, Class). PR 932
  • Parse CommandComplete message using a regular expression, allows complete catch of server returned commands for INSERT, UPDATE, DELETE, SELECT, FETCH, MOVE, COPY and future commands. PR 962
  • Use 'time with timezone' and 'timestamp with timezone' as is and ignore the user provided Calendars, 'time' and 'timestamp' work as earlier except "00:00:00" now maps to 1970-01-01 and "24:00:00" uses the system provided Calendar ignoring the user-provided one PR 1053
  • Change behaviour of multihost connection. The new behaviour is to try all secondaries first before trying the master PR 844.
  • Avoid reflective access to TimeZone.defaultTimeZone in Java 9+ PR 1002 fixes Issue 986

Fixed

  • Make warnings available as soon as they are received from the server. This is useful for long running queries, where it can be beneficial to know about a warning before the query completes. PR 857
  • Use 00:00:00 and 24:00:00 for LocalTime.MIN/MAX. PR 992
  • Now the DatabaseMetaData.getFunctions() implementation complies with the JDBC docs. PR 918
  • Execute autosave/rollback savepoint via simple queries always to prevent "statement S_xx not exists" when autosaving fixes Issue #955
  • Received resultset tuples, but no field structure for them" when bind failure happens on 5th execution of a statement Issue 811

Removed

  • Drop support for the (insecure) crypt authentication method. PR 1026

Deprecated

  • Reintroduce Driver.getVersion for backward compatibility reasons, mark it as deprecated as application should not rely on it (regression since 42.0.0) 50d5dd3e

42.1.4 (2017-08-01)

Changed

  • Statements with non-zero fetchSize no longer require server-side named handle. This might cause issues when using old PostgreSQL versions (pre-8.4)+fetchSize+interleaved ResultSet processing combo. Issue 869

42.1.3 (2017-07-14)

Fixed

  • Fix NPE in PreparedStatement.executeBatch in case of empty batch (regression since 42.1.2). PR 867

42.1.2 (2017-07-12)

Changed

  • Better logic for returning keyword detection. Previously, pgjdbc could be defeated by column names that contain returning, so pgjdbc failed to "return generated keys" as it considered statement as already having returning keyword PR 824 201daf1d
  • Use server-prepared statements for batch inserts when prepareThreshold>0. Note: this enables batch to use server-prepared from the first executeBatch() execution (previously it waited for prepareThreshold executeBatch() calls) abc3d9d7

Fixed

  • Replication API: fix issue in #834 setting statusIntervalUpdate causes high CPU load. PR 835 59236b74

Regressions

  • NPE in PreparedStatement.executeBatch in case of empty batch. Fixed in 42.1.3

42.1.1 (2017-05-05)

Fixed

  • Fix infinite dates that might be corrupted when transferred in binary for certain JREs. For instance, 5881610-07-11 instead of infinity. 1e5bf563

42.1.0 (2017-05-04)

Added

  • Support fetching a REF_CURSOR using getObject PR 809

Fixed

  • Fix data being truncated in setCharacterStream (bug introduced in 42.0.0) PR 802
  • Fix calculation of lastReceiveLSN for logical replication PR 801
  • Make sure org.postgresql.Driver is loaded when accessing though DataSource interface Issue 768

Regressions

  • There's no 42.1.0.jre6 version due to infinity handling bug. Fixed in 42.1.1.jre6

42.0.0 (2017-02-20)

Added

Changed

  • Version bumped to 42.0.0 to avoid version clash with PostgreSQL version and follow a better sematic versioning. 46634923
  • Ensure executeBatch() can be used with pgbouncer. Previously pgjdbc could use server-prepared statements for batch execution even with prepareThreshold=0. Issue 742
  • Error position is displayed when SQL has unterminated literals, comments, etc. Issue 688
  • Strict handling of accepted values in getBoolean and setObject(BOOLEAN), now it follows PostgreSQL accepted values, only 1 and 0 for numeric types are accepted (previously !=0 was true). PR 732
  • Return correct versions and name of the driver. PR 668

Removed

  • Support for PostgreSQL versions below 8.2 was dropped. PR 661

Deprecated

  • Deprecated PGPoolingDataSource, instead of this class you should use a fully featured connection pool like HikariCP, vibur-dbcp, commons-dbcp, c3p0, etc. PR 739

Regressions

  • Data truncated in setCharacterStream. Fixed in 42.1.0
  • No suitable driver found for jdbc:postgresql when using a DataSource implementation. Fixed in 42.1.0