hsqldb (2.7.4-1build1) resolute; urgency=medium

  * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)

 -- Graham Inggs <ginggs@ubuntu.com>  Wed, 21 Jan 2026 19:22:17 +0000

hsqldb (2.7.4-1) unstable; urgency=medium

  * New upstream version 2.7.4.
  * Declare compliance with Debian Policy 4.7.0.

 -- Markus Koschany <apo@debian.org>  Sun, 09 Feb 2025 15:21:40 +0100

hsqldb (2.7.2-1) unstable; urgency=medium

  * New upstream version 2.7.2.
  * Declare compliance with Debian Policy 4.6.2.

 -- Markus Koschany <apo@debian.org>  Sun, 18 Jun 2023 20:30:00 +0200

hsqldb (2.7.1-1) unstable; urgency=medium

  * New upstream version 2.7.1.
    - Fix CVE-2022-41853:
      Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb
      (HyperSQL DataBase) to process untrusted input may be vulnerable to a
      remote code execution attack. By default it is allowed to call any static
      method of any Java class in the classpath resulting in code execution.
      The issue can be prevented by updating to 2.7.1 or by setting the system
      property "hsqldb.method_class_names" to classes which are allowed to be
      called. For example, System.setProperty("hsqldb.method_class_names",
      "abc") or Java argument -Dhsqldb.method_class_names="abc" can be used.
      From version 2.7.1 all classes by default are not accessible except those
      in java.lang.Math and need to be manually enabled.
      (Closes: #1023573)

 -- Markus Koschany <apo@debian.org>  Sun, 04 Dec 2022 21:32:57 +0100

hsqldb (2.7.0-1) unstable; urgency=medium

  * New upstream version 2.7.0.
  * Declare compliance with Debian Policy 4.6.1.

 -- Markus Koschany <apo@debian.org>  Sat, 06 Aug 2022 12:56:15 +0200

hsqldb (2.6.1-1) unstable; urgency=medium

  * New upstream version 2.6.1.

 -- Markus Koschany <apo@debian.org>  Fri, 22 Oct 2021 12:46:07 +0200

hsqldb (2.6.0-1) unstable; urgency=medium

  * New upstream version 2.6.0.
  * Declare compliance with Debian Policy 4.6.0.
  * Compile for Java 9+.

 -- Markus Koschany <apo@debian.org>  Fri, 03 Sep 2021 23:48:05 +0200

hsqldb (2.5.1-1) unstable; urgency=medium

  * New upstream version 2.5.1.
  * Declare compliance with Debian Policy 4.5.0.
  * Switch to debhelper-compat = 13.

 -- Markus Koschany <apo@debian.org>  Tue, 07 Jul 2020 13:59:36 +0200

hsqldb (2.5.0-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Removed the Java 11 compatibility patch (fixed upstream)
  * Depend on libservlet-api-java instead of libservlet3.1-java
  * Removed the javadoc from the upstream tarball
  * Standards-Version updated to 4.4.0

 -- Emmanuel Bourg <ebourg@apache.org>  Tue, 16 Jul 2019 10:55:46 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libhsqldb-java`.
