CVE-2021-44228 status

The pgjdbc team is has reviewed the project and determined that the PostgreSQL JDBC driver is not effected by this CVE. The project has very few runtime dependencies and log4j is not one of them, therefore it does not expose the project to this security issue.

The pgjdbc team

Notable changes

Changed

• improv: Arrays in Object[] PR 2330 when an Object[] contains other arrays, treat as though it were a multi-dimensional array the one exception is byte[], which is not supported.
• improv: Use jre utf-8 decoding PR 2317 Remove use of custom utf-8 decoding.
• perf: improve performance of bytea string decoding PR 2320 improve the parsing of bytea hex encoded string by making a lookup table for each of the valid ascii code points to the 4 bit numeric value
• feat: intern/canonicalize common strings PR 2234 ### Added

Fixed

• numeric binary decode for even 10 thousands PR #2327 fixes Issue 2326 binary numeric values which represented integers multiples of 10,000 from 10,000-9,990,000 were not decoded correctly
• [typo] typo in certdir/README.md PR #2309 certificatess => certificates
• [typo] typo in TimestampUtils.java PR #2314 Change Greagorian to Gregorian.
• remove check for negative pid in cancel request. Apparently pgbouncer can send one fixes Issue 2317 PR #2319

Notable changes

Changed

• No longer build for Java 6 or Java 7
• If assumeMinServerVersion is not defined and server is at least 9.0, group startup statements into a single transaction PR #1977

Added

Fixed

• Rework OSGi bundle activator so it does not rely on exception message to check DataSourceFactory presence PR #507
• Fix database metadata getFunctions() and getProcedures() to ignore search_path when no schema pattern is specified PR #2174
• Fix refreshRow made the row readOnly. [PR #2195](https://github.com/pgjdbc/pgjdbc/pull/2195 Fixes Issue #2193
• Fix do not add double quotes to identifiers already double quoted PR #2224 Fixes Issue #2223 Add a property QUOTE_RETURNING_IDENTIFIERS which determines if we put double quotes around identifiers that are provided in the returning array.
• Fix Provide useful error message for empty or missing passwords for SCRAM auth PR #2290 fixes Issue #2288

Contributors to this release

We thank the following people for their contributions to this release.

Abhishek-kumar09
adrklos
Agata Naomichi
Andrew Dunstan
Brett Okken
costa100
Dave Cramer
David Rader
Eric Peterson
Feng zhihao
Frode Carlsen
Hugo Abreu
iceback
Jeremy Mailen
Jesper Pedersen
Jorge Solorzano
Jorge Solórzano
Juha Syrjälä
JY Cr
Laurenz Albe
Michael Ernst
MMeent
odubaj
Pavel Bludov
Peter Eisentraut
plan3d
Power
rtrier
Sehrope Sarkuni
Simon Strassl
Tom Aizenberg
Vladimir Sitnikov
Vyom Yadav
xpoinsard