libpgjava (42.7.13-1) unstable; urgency=medium

  * New upstream version 42.7.13.

 -- Christoph Berg <myon@debian.org>  Mon, 06 Jul 2026 22:01:40 +0200

libpgjava (42.7.12-1) unstable; urgency=medium

  * New upstream version 42.7.12.
  * Switch to Static-Built-Using.

 -- Christoph Berg <myon@debian.org>  Tue, 30 Jun 2026 11:17:37 +0200

libpgjava (42.7.11-1) unstable; urgency=medium

  * New upstream version 42.7.11.
  * Limit SCRAM PBKDF2 iterations accepted from the server.
    pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256
    authentication, where a malicious or compromised PostgreSQL server could
    specify an extremely large PBKDF2 iteration count, causing the client to
    consume unbounded CPU and potentially exhaust connection pools. The fix
    introduces a new scramMaxIterations connection property (defaulting to
    100,000) to cap iteration counts before computation begins.
    (CVE-2026-42198)

 -- Christoph Berg <myon@debian.org>  Wed, 29 Apr 2026 11:08:43 +0200

libpgjava (42.7.10-1) unstable; urgency=medium

  * New upstream version 42.7.10.

 -- Christoph Berg <myon@debian.org>  Wed, 11 Feb 2026 20:38:12 +0100

libpgjava (42.7.9-1) unstable; urgency=medium

  * New upstream version 42.7.9.

 -- Christoph Berg <myon@debian.org>  Sat, 17 Jan 2026 14:52:24 +0100

libpgjava (42.7.8-2) unstable; urgency=medium

  * Team upload.
  * Ignore org.junit:junit-bom to avoid propagating it as a transitive
    dependency to reverse build-deps through the pom. (Closes: #1121881)
  * Bump Standards-Version to 4.7.2
  * Update d/copyright Format URL
  * Update debian/watch to version 5
  * Remove Rules-Requires-Root from debian/control

 -- tony mancill <tmancill@debian.org>  Wed, 03 Dec 2025 21:19:04 -0800

libpgjava (42.7.8-1) unstable; urgency=medium

  * New upstream version 42.7.8.

 -- Christoph Berg <myon@debian.org>  Tue, 23 Sep 2025 20:18:01 +0000

libpgjava (42.7.7-2) unstable; urgency=medium

  * Rebuild against libscram-java 3.2-1. (CVE-2025-59432)

 -- Christoph Berg <myon@debian.org>  Tue, 23 Sep 2025 18:14:27 +0000

libpgjava (42.7.7-1) unstable; urgency=medium

  * New upstream version 42.7.7.
    Fixes CVE-2025-49146: When the PostgreSQL JDBC driver is configured with
    channel binding set to required (default value is prefer), the driver
    would incorrectly allow connections to proceed with authentication methods
    that do not support channel binding (such as password, MD5, GSS, or SSPI
    authentication). This could allow a man-in-the-middle attacker to
    intercept connections that users believed were protected by channel
    binding requirements.

 -- Christoph Berg <myon@debian.org>  Fri, 13 Jun 2025 15:26:53 +0200

libpgjava (42.7.6-1) experimental; urgency=medium

  * New upstream version 42.7.6.

 -- Christoph Berg <myon@debian.org>  Mon, 02 Jun 2025 17:05:52 +0200

libpgjava (42.7.5-2) unstable; urgency=medium

  * Fix org.postgresql.util.PSQLException: Unable to convert bytea parameter
    at position 1 to literal. (Closes: #1098830)

 -- Christoph Berg <myon@debian.org>  Thu, 17 Apr 2025 11:14:38 +0000

libpgjava (42.7.5-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
  * Removed the unused dependency on libxerces2-java

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 10 Feb 2025 10:15:21 +0100

libpgjava (42.7.3-2) unstable; urgency=medium

  * Team upload.
  * Removed the -java-doc package (Closes: #1088125)
  * Standards-Version updated to 4.7.0

 -- Emmanuel Bourg <ebourg@apache.org>  Mon, 09 Dec 2024 14:05:50 +0100

libpgjava (42.7.3-1) unstable; urgency=medium

  * New upstream version 42.7.3.

 -- Christoph Berg <myon@debian.org>  Fri, 15 Mar 2024 15:13:39 +0100

libpgjava (42.7.2-1) unstable; urgency=medium

  * New upstream version 42.7.2. (CVE-2024-1597)

 -- Christoph Berg <myon@debian.org>  Thu, 22 Feb 2024 11:46:47 +0100

libpgjava (42.7.1-1) unstable; urgency=medium

  * New upstream version 42.7.1.

 -- Christoph Berg <myon@debian.org>  Thu, 07 Dec 2023 23:27:15 +0100

libpgjava (42.7.0-1) unstable; urgency=medium

  * New upstream version 42.7.0.

 -- Christoph Berg <myon@debian.org>  Tue, 21 Nov 2023 10:31:51 +0100

libpgjava (42.6.0-2) unstable; urgency=medium

  * Remove ancient Replaces/Conflicts. Thanks Helmut Grohne for the report.

 -- Christoph Berg <myon@debian.org>  Wed, 18 Oct 2023 14:05:07 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libpostgresql-jdbc-java`.
