Home on pgJDBC

Setting up the JDBC Driver

Sun, 19 Jun 2022 22:46:55 +0530

This section describes the steps you need to take before you can write or run programs that use the JDBC interface.

Getting the Driver

Precompiled versions of the driver can be downloaded from the PostgreSQL® JDBC web site.

Initializing the Driver

Sun, 19 Jun 2022 22:46:55 +0530

This section describes how to load and initialize the JDBC driver in your programs.

Importing JDBC

Any source file that uses JDBC needs to import the java.sql package, using:

Using SSL

Sun, 19 Jun 2022 22:46:55 +0530

Configuring the PostgreSQL® server for SSL is covered in the main documentation, so it will not be repeated here. There are also instructions in the source certdir Before trying to access your SSL enabled server from Java, make sure you can get to it via psql. You should see output like the following if you have established a SSL connection.

$ ./bin/psql -h localhost -U postgres
psql (14.5)
SSL connection (protocol: TLSv1.2, cipher: ECDHE-RSA-AES256-GCM-SHA384, bits: 256, compression: off)
Type "help" for help.

postgres=#

Custom SSLSocketFactory

PostgreSQL® provides a way for developers to customize how an SSL connection is established. This may be used to provide a custom certificate source or other extensions by allowing the developer to create their own SSLContext instance. The connection URL parameters sslfactory allow the user to specify which custom class to use for creating the SSLSocketFactory . The class name specified by sslfactory must extend javax.net.ssl.SSLSocketFactory and be available to the driver’s classloader.

Issuing a Query and Processing the Result

Sun, 19 Jun 2022 22:46:55 +0530

Any time you want to issue SQL statements to the database, you require a Statement or PreparedStatement instance. Once you have a Statement or PreparedStatement , you can use issue a query. This will return a ResultSet instance, which contains the entire result (see the section called Getting results based on a cursor here for how to alter this behaviour). Example 5.1, “Processing a Simple Query in JDBC” illustrates this process.

Example 5.1. Processing a Simple Query in JDBC

This example will issue a simple query and print out the first column of each row using a Statement .

Calling Stored Functions and Procedures

Sun, 19 Jun 2022 22:46:55 +0530

PostgreSQL® supports two types of stored objects, functions that can return a result value and - starting from v11 - procedures that can perform transaction control. Both types of stored objects are invoked using CallableStatement and the standard JDBC escape call syntax {call storedobject(?)} . The escapeSyntaxCallMode connection property controls how the driver transforms the call syntax to invoke functions or procedures.

The default mode, select , supports backwards compatibility for existing applications and supports function invocation only. This is required to invoke a function returning void.

Storing Binary Data

Sun, 19 Jun 2022 22:46:55 +0530

PostgreSQL® provides two distinct ways to store binary data. Binary data can be stored in a table using the data type BYTEA or by using the Large Object feature which stores the binary data in a separate table in a special format and refers to that table by storing a value of type OID in your table.

In order to determine which method is appropriate you need to understand the limitations of each method. The BYTEA data type is not well suited for storing very large amounts of binary data. While a column of type BYTEA can hold up to 1 GB of binary data, it would require a huge amount of memory to process such a large value. The Large Object method for storing binary data is better suited to storing very large values, but it has its own limitations. Specifically deleting a row that contains a Large Object reference does not delete the Large Object. Deleting the Large Object is a separate operation that needs to be performed. Large Objects also have some security issues since anyone connected to the database can view and/or modify any Large Object, even if they don’t have permissions to view/update the row containing the Large Object reference.

JDBC escapes

Sun, 19 Jun 2022 22:46:55 +0530

The JDBC specification (like the ODBC specification) acknowledges the fact that some vendor specific SQL may be required for certain RDBMS features. To aid developers in writing portable JDBC applications across multiple database products, a special escape syntax is used to specify the generic commands the developer wants to be run. The JDBC driver translates these escape sequences into native syntax for its specific database. For more information consult the Java DB Technical Documentation.

PostgreSQL® Extensions to the JDBC API

Sun, 19 Jun 2022 22:46:55 +0530

PostgreSQL® is an extensible database system. You can add your own functions to the server, which can then be called from queries, or even add your own data types. As these are facilities unique to PostgreSQL®, we support them from Java, with a set of extension APIs. Some features within the core of the standard driver actually use these extensions to implement Large Objects, etc.

Accessing the Extensions

To access some of the extensions, you need to use some extra methods in the org.postgresql.PGConnection class. In this case, you would need to cast the return value of Driver.getConnection() . For example:

Using the Driver in a Multithreaded or a Servlet Environment

Sun, 19 Jun 2022 22:46:55 +0530

The PostgreSQL® JDBC driver is not thread safe. The PostgreSQL server is not threaded. Each connection creates a new process on the server as such any concurrent requests to the process would have to be serialized. The driver makes no guarantees that methods on connections are synchronized. It will be up to the caller to synchronize calls to the driver.

A notable exception is org/postgresql/jdbc/TimestampUtils.java which is threadsafe.

Connection Pools and Data Sources

Sun, 19 Jun 2022 22:46:55 +0530

JDBC 2 introduced standard connection pooling features in an add-on API known as the JDBC 2.0 Optional Package (also known as the JDBC 2.0 Standard Extension). These features have since been included in the core JDBC 3 API.

The JDBC API provides a client and a server interface for connection pooling. The client interface is javax.sql.DataSource, which is what application code will typically use to acquire a pooled database connection. The server interface is javax.sql.ConnectionPoolDataSource , which is how most application servers will interface with the PostgreSQL® JDBC driver.

Logging using java.util.logging

Sun, 19 Jun 2022 22:46:55 +0530

The PostgreSQL® JDBC Driver supports the use of logging (or tracing) to help resolve issues with the pgJDBC Driver when is used in your application.

The pgJDBC Driver uses the logging APIs of java.util.logging that is part of Java since JDK 1.4, which makes it a good choice for the driver since it doesn’t add any external dependency for a logging framework. java.util.logging is a very rich and powerful tool, it’s beyond the scope of these docs to explain how to use it to it’s full potential, for that please refer to Java Logging Overview.

PostgreSQL JDBC Driver 42.7.13 Released

Mon, 06 Jul 2026 10:18:00 -0400

Adds search_path GUC_REPORT cache invalidation (PG 18+), flushCacheOnDdl, connectExecutor, classLoaderStrategy properties; caps reWriteBatchedInserts to protocol limit; improves batching performance; fixes updatable ResultSet search_path visibility, XA autoCommit, BlobInputStream seek, SSL key-format detection, FIPS trust anchors, and many more.

PostgreSQL JDBC Driver 42.7.12 Released

Mon, 29 Jun 2026 12:00:00 -0400

Security release: fixes silent channel-binding downgrade (CVE-2026-54291). Under channelBinding=require, a server presenting a certificate with an unsupported signature algorithm (e.g. Ed25519) could cause the driver to silently fall back to plain SCRAM-SHA-256, losing man-in-the-middle protection.

PostgreSQL JDBC Driver 42.7.11 Released

Tue, 28 Apr 2026 16:00:00 -0400

Security release: caps SCRAM PBKDF2 iterations (CVE-2026-42198). Adds require_auth, fixes cursor fetching after BEGIN, SSL fallback/timeout handling, COPY hang on IOException, and more.

PostgreSQL JDBC Driver 42.7.10 Released

Wed, 11 Feb 2026 10:00:00 -0500

Notable changes

Changed

chore: Migrate to Shadow 9 PR 3931
style: fix empty line before javadoc for checkstyle compliance PR #3925
style: fix lambda argument indentation for checkstyle compliance PR #3922
test: add autosave=always|never|conservative and cleanupSavepoints=true|false to the randomized CI jobs PR #3917

Fixed

fix: non-standard strings failing test for version 19 PR #3934
fix: small issues in ConnectionFactoryImpl PR #3929
fix: process pending responses before fastpath to avoid protocol errors PR # 3913
doc: use.md, fix typos PR #3911
doc: datasource.md, fix minor formatting issue PR #3912
doc: add the new PGP signing key to the official documentation PR #3912

Reverted

Revert “fix: make all Calendar instances proleptic Gregorian (#3837) (#3887)” PR #3932

Commits by author

PostgreSQL JDBC Driver 42.7.9 Released

Thu, 15 Jan 2026 10:37:00 -0500

Notable changes

Added

feat: query timeout property PR #3705
feat: Add PEMKeyManager to handle PEM based certs and keys PR #3700

Changed

perf: optimize PGInterval.getValue() by replacing String.format with StringBuilder
chore: drop SpotBugs as we do not seem to use it
doc: update property quoteReturningIdentifiers default value PR #3847
security: Use a static method forName to load all user supplied classes. Use the Class.forName 3 parameter method and do not initilize it unless it is a subclass of the expected class

Fixed

fix: incorrect pg_stat_replication.reply_time calculation PR #3906
fix: close temporary lob descriptors that are used internally in PreparedStatement#setBlob
fix: PGXAConnection.prepare(Xid) should return XA_RDONLY if the connection is read only PR #3897
fix: make all Calendar instances proleptic Gregorian PR #3837
fix: Simplify concurrency guards on QueryExecutorBase#transaction and QueryExecutorBase#standardConformingStrings PR #3897
fix: avoid memory leaks in Java <= 21 caused by Thread.inheritedAccessControlContext PR #3886
fix: Issue #3784 pgjdbc can’t decode numeric arrays containing special numbers like NaN PR #3838
fix: use ssl_is_used() to check for ssl connection PR #3867
fix: the classloader is nullable PR #3907
deps: Update dependency org.junit:junit-bom to v5.14.1
deps: Update dependency org.apache.bcel:bcel to v6.11.0
deps: Update dependency org.mockito:mockito-bom to v5.20.0
deps: Update dependency net.bytebuddy:byte-buddy-parent to v1.18.2
deps: Update logback to v1.5.21
deps: Update dependency jacoco to v0.8.14
deps: Update dependency it.unimi.dsi:fastutil to v8.5.18
deps: Update checkerframework

Commits by author

PostgreSQL JDBC Driver 42.7.8 Released

Thu, 18 Sep 2025 06:00:00 -0400

Notable changes

Added

feat: Add configurable boolean-to-numeric conversion for ResultSet getters PR #3796

Changed

perf: remove QUERY_ONESHOT flag when calling getMetaData PR #3783
perf: use BufferedInputStream with FileInputStream PR #3750
perf: enable server-prepared statements for DatabaseMetaData

Fixed

fix: avoid IllegalStateException: Timer already cancelled when StatementCancelTimerTask.run throws a runtime error PR #3778

PostgreSQL JDBC Driver 42.7.7 Released

Wed, 11 Jun 2025 05:00:00 -0400

Notable changes

Security

security: Client Allows Fallback to Insecure Authentication Despite channelBinding=require configuration. Fix channel binding required handling to reject non-SASL authentication Previously, when channel binding was set to “require”, the driver would silently ignore this requirement for non-SASL authentication methods. This could lead to a false sense of security when channel binding was explicitly requested but not actually enforced. The fix ensures that when channel binding is set to “require”, the driver will reject connections that use non-SASL authentication methods or when SASL authentication has not completed properly. See the Security Advisory for more detail. Reported by George MacKerron The following CVE-2025-49146 has been issued

PostgreSQL JDBC Driver 42.7.6 Released

Tue, 27 May 2025 05:00:00 -0500

Notable changes

Features

fix: Enhanced DatabaseMetadata.getIndexInfo() method, added index comment as REMARKS property PR #3513

Performance Improvements

performance: Improve ResultSetMetadata.fetchFieldMetaData by using IN row values instead of UNION ALL for improved query performance (later reverted) PR #3510
feat:Use a single simple query for all startup parameters, so groupStartupParameters is no longer needed PR #3613

Bug Fixes

Protocol & Connection Handling

fix: Send extra_float_digits=3 for PostgreSQL 12+ as well PR #3491
fix: Fixed handling of protocol 3.2 and wider cancel keys PR #3592
fix: Made PgConnection#abort compatible with Java 24 PR #3582
fix: Fixed ArrayIndexOutOfBounds when writing big objects into GSS enabled connections PR #3500
fix: Added back application name setting PR #3509

Metadata & Catalog Handling

fix: Set column name explicitly when using current_database() in queries PR #3526
fix: Use query to find the current catalog instead of relying on the database in the connection URL pull #3565
fix: Refactored empty resultset to use empty result set if the catalog is not correct PR #3588

API Improvements

fix: Undeprecated Fastpath API and fixed deprecation warnings PR #3493
fix: Undeprecated sslfactoryarg PR #3496
fix: Added PgMessageType and used static variables for protocol literals PR #3609
fix: Add the ability to turn off automatic LSN flush PR #3403
fix: isValid incorrectly called execute, instead of executeWithFlags PR #3631. Fixes Issue #3630
fix: EOFException on PreparedStatement#toString with unset bytea parameter since 42.7.4 Commit 0a88ea4. Fixes Issue #3365

Infrastructure & Build Improvements

Java Support

update: Updated to use Java 21 for building pgjdbc by default PR #3612
update: Updated Java 21 as the build dependency for copr PR #3607
update: Updated latest JDK to version 24 PR #3580
update: Applied the latest byte-buddy version for tests to support the latest Java versions PR #3583

Testing & Quality

test: Added ErrorProne verification to detect bugs earlier PR #3493
test: Simplified TestUtil.openDB, added tests with various assumeMinServerVersion values PR #3624
test: Updated to use PostgreSQL 17 rather than 17rc1 for CI tests PR #3501
test: Removed stale logging message from SslTest PR #3584
test: Added CI executions with adaptive_fetch=true by default for performance testing PR #3615
test: Added tests with reWriteBatchedInserts=true PR #3616

Code Quality

doc: Fixed javadoc warnings PR #3493
chore: Added missing @Override annotations commit #4f986ff8
chore: Fixed empty catch block warnings commit #840fdab9
chore: Fixed unused variables commit #2d3b00c2
refactor: Made private methods that do not use instance fields static commit #ddb71441
fix: Fixed .equals when comparing offsetDateTime with OffsetDateTime.MIN and OffsetDateTime.MAX commit #2bf410af
refactor: Factored out duplicated .getBytes() when converting date/time to Date/Time/Timestamp commit #882b97f9

Dependency Updates

Updated numerous dependencies including:
Gradle to 8.14
Checkerframework to v3.49.3
JUnit to v5.12.2
Spotbugs to v4.9.3
Checkstyle to v10.23.1
Hamcrest to v3
Error Prone Core to v2.38.0
Byte Buddy to v1.17.5
JaCoCo to v0.8.13

Documentation

docs: Corrected location for 42.2.29 changelogs commit #bb276568
docs: Fixed naming of release note commit #032d0e22

Removed

chore: Removed unused Travis CI configuration PR #3498
chore: Excluded Oracle Java 17 from CI tests PR #3499
fix: Removed workaround which was needed for an old checkstyle commit #4500ea04

Commits by author

PostgreSQL JDBC Driver 42.7.5 Released

Tue, 14 Jan 2025 08:00:00 -0400

Notable changes

Added

ci: Test with Java 23 PR #3381

Fixed

regression: revert change in fc60537 PR #3476
fix: PgDatabaseMetaData implementation of catalog as param and return value PR #3390
fix: Support default GSS credentials in the Java Postgres client PR #3451
fix: return only the transactions accessible by the current_user in XAResource.recover PR #3450
feat: don’t force send extra_float_digits for PostgreSQL >= 12 fix Issue #3432 PR #3446
fix: exclude “include columns” from the list of primary keys PR #3434
perf: Enhance the meta query performance by specifying the oid. PR #3427
feat: support getObject(int, byte[].class) for bytea PR #3274
docs: document infinity and some minor edits PR #3407
fix: Added way to check for major server version, fixed check for RULE PR #3402
docs: fixed remaining paragraphs PR #3398
docs: fixed paragraphs in javadoc comments PR #3397
fix: Reuse buffers and reduce allocations in GSSInputStream addresses Issue #3251 PR #3255
chore: Update Gradle to 8.10.2 PR #3388
fix: getSchemas() PR #3386
fix: Update rpm postgresql-jdbc.spec.tpl with scram-client PR #3324
fix: Clearing thisRow and rowBuffer on close() of ResultSet Issue #3383 PR #3384
fix: Package was renamed to maven-bundle-plugin PR #3382
fix: As of version 18 the RULE privilege has been removed PR #3378
fix: use buffered inputstream to create GSSInputStream PR #3373
test: get rid of 8.4, 9.0 pg versions and use >= jdk version 17 PR #3372
Changed docker-compose version and renamed script file in instructions to match the real file name PR #3363
test:Do not assume “test” database in DatabaseMetaDataTransactionIsolationTest PR #3364
try to categorize dependencies PR #3362

Commits by author

PostgreSQL JDBC Driver 42.7.4 Released

Thu, 22 Aug 2024 08:00:00 -0400

Notable changes

Added

chore: SCRAM dependency to 3.1 and support channel binding PR #3188
chore: Add PostgreSQL 15, 16, and 17beta1 to CI tests PR #3299
test: Update to 17beta3 PR #3308
chore: Implement direct SSL ALPN connections PR #3252
translation: Add Korean translation file PR #3276

Fixed

fix: PgInterval ignores case for represented interval string PR #3344
perf: Avoid extra copies when receiving int4 and int2 in PGStream PR #3295
fix: Add support for Infinity::numeric values in ResultSet.getObject PR #3304
fix: Ensure order of results for getDouble PR #3301
perf: Replace BufferedOutputStream with unsynchronized PgBufferedOutputStream, allow configuring different Java and SO_SNDBUF buffer sizes PR #3248
fix: Fix SSL tests PR #3260
fix: Support bytea in preferQueryMode=simple PR #3243
fix: Fix #3234 - Return -1 as update count for stored procedure calls PR #3235
fix: Fix #3224 - conversion for TIME ‘24:00’ to LocalTime breaks in binary-mode PR #3225
perf: Speed up getDate by parsing bytes instead of String PR #3141
fix: support PreparedStatement.setBlob(1, Blob) and PreparedStatement.setClob(1, Clob) for lobs that return -1 for length PR #3136
fix: Validates resultset Params in PGStatement constructor. uses assertThro… PR #3171
fix: Validates resultset parameters PR #3167
docs: Replace greater to with greater than PR #3315
docs: Clarify binaryTransfer and prepareThreshold PR #3338
docs: use.md, typo PR #3314
test: Use docker v2 which changes docker-compose to docker compose #3339
refactor: Merge PgPreparedStatement#setBinaryStream int and long methods PR #3165
test: Test both binaryMode=true,false when creating connections in DatabaseMetaDataTest PR #3231
docs: Fixed typos in all source code and documentations PR #3242
chore: Remove self-hosted runner PR #3227
docs: Add cancelSignalTimeout in README PR #3190
docs: Document READ_ONLY_MODE in README PR #3175
test: Test for +/- infinity double values PR #3294
test: Switch localhost and auth-test around for test-gss PR #3343
- fix: remove preDescribe from internalExecuteBatch PR 2883

Deprecated

test: Deprecate all PostgreSQL versions older than 9.1 PR #3335

Commits by author

PostgreSQL JDBC Driver 42.7.3 Released

Thu, 14 Mar 2024 14:51:00 -0400

Notable changes

Changed

chore: gradle config enforces 17+ PR #3147

Fixed

fix: boolean types not handled in SimpleQuery mode PR #3146 *make sure we handle boolean types in simple query mode
- support uuid as well
- handle all well known types in text mode and change else if to switch
fix: released new versions of 42.2.29, 42.3.10, 42.4.5, 42.5.6, 42.6.2 to deal with NoSuchMethodError on ByteBuffer#position when running on Java 8
fix: Fix 2 changelog entry titles PR #3142

Commits by author

PostgreSQL JDBC Driver 42.6.2 Released

Thu, 14 Mar 2024 08:23:00 -0400

Notable changes

Fixed

Fix: Due to building the release using Java 17 version 42.6.1, would throw an exception NoSuchMethodError on ByteBuffer#position When Running on Java 8
Fix: In SimpleQuery mode SimpleParameterList did not support type casting for all well known types.

PostgreSQL JDBC Driver 42.4.5 Released

Wed, 13 Mar 2024 15:43:00 -0400

Notable changes

Fixed

Fix: Due to building the release using Java 17 version 42.4.4, would throw an exception NoSuchMethodError on ByteBuffer#position When Running on Java 8
Fix: In SimpleQuery mode SimpleParameterList did not support type casting for all well known types.

PostgreSQL JDBC Driver 42.3.10 Released

Wed, 13 Mar 2024 15:42:00 -0400

Notable changes

Fixed

Fix: Due to building the release using Java 17 version 42.3.9, would throw an exception NoSuchMethodError on ByteBuffer#position When Running on Java 8
Fix: In SimpleQuery mode SimpleParameterList did not support type casting for all well known types.

PostgreSQL JDBC Driver 42.2.29 Released

Wed, 13 Mar 2024 15:32:00 -0400

Notable changes

Fixed

Fix: Due to building the release using Java 17 version 42.2.28, would throw an exception NoSuchMethodError on ByteBuffer#position When Running on Java 8
Fix: In SimpleQuery mode SimpleParameterList did not support type casting for all well known types.

PostgreSQL JDBC Driver 42.5.6 Released

Wed, 13 Mar 2024 08:23:00 -0500

Notable changes

Fixed

Fix: Due to building the release using Java 17 version 42.5.5, would throw an exception NoSuchMethodError on ByteBuffer#position When Running on Java 8
Fix: In SimpleQuery mode SimpleParameterList did not support type casting for all well known types.

PostgreSQL JDBC Driver 42.2.28 Released

Wed, 21 Feb 2024 08:23:00 -0500

Notable changes

Security

security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a - such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment. This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.

PostgreSQL JDBC Driver 42.3.9 Released

Wed, 21 Feb 2024 08:23:00 -0500

Notable changes

Security

security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a - such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment. This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.

PostgreSQL JDBC Driver 42.4.4 Released

Wed, 21 Feb 2024 08:23:00 -0500

Notable changes

Security

security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a - such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment. This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.

PostgreSQL JDBC Driver 42.5.5 Released

Wed, 21 Feb 2024 08:23:00 -0500

Notable changes

Security

security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a - such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment. This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.

PostgreSQL JDBC Driver 42.6.1 Released

Wed, 21 Feb 2024 08:23:00 -0500

Notable changes

Security

security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a - such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment. This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.

PostgreSQL JDBC Driver 42.7.2 Released

Wed, 21 Feb 2024 08:23:00 -0500

Notable changes

Security

security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a - such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment. This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.

Changed

fix: Use simple query for isValid. Using Extended query sends two messages checkConnectionQuery was never ever set or used, removed PR #3101
perf: Avoid autoboxing bind indexes PR #1244
refactor: Document that encodePassword will zero out the password array, and remove driver’s default encodePassword PR #3084

Added

feat: Add PasswordUtil for encrypting passwords client side PR #3082

Commits by author

PostgreSQL JDBC Driver 42.7.1 Released

Wed, 06 Dec 2023 00:34:33 -0500

Notable changes

Changed

perf: improve performance of PreparedStatement.setBlob, BlobInputStream, and BlobOutputStream with dynamic buffer sizing PR #3044

Fixed

fix: Apply connectTimeout before SSLSocket.startHandshake to avoid infinite wait in case the connection is broken PR #3040
fix: support waffle-jna 2.x and 3.x by using reflective approach for ManagedSecBufferDesc PR #2720 Fixes Issue #2690.
fix: NoSuchMethodError on ByteBuffer#position When Running on Java 8 when accessing arrays, fixes Issue #3014
Revert “PR #2925 Use canonical DateStyle name” PR #3035 Fixes Issue #3008
Revert “PR ##2973 feat: support SET statements combining with other queries with semicolon in PreparedStatement” PR #3010 Fixes Issue #3007
fix: avoid timezone conversions when sending LocalDateTime to the database #2852 Fixes Issue #1390 ,Issue #2850 Closes Issue #1391

PostgreSQL JDBC Driver 42.7.0 Released

Mon, 20 Nov 2023 08:09:33 -0500

Notable changes

Known Issues

Fixes issues introduced in 42.7.0:

NoSuchMethodError on ByteBuffer#position When Running on Java 8 when accessing arrays, issue https://github.com/pgjdbc/pgjdbc/issues/3014
SET followed by SHOW in one statement returns wrong result, issue https://github.com/pgjdbc/pgjdbc/issues/3007
42.7.0 updated DateStyle from ISO to ISO, MDY (it aligns with PostgreSQL defaults), and it will return the wrong results when server uses non-default DateStyle (see https://github.com/pgjdbc/pgjdbc/issues/3008)

Changed

fix: Deprecate for removal PGPoint.setLocation(java.awt.Point) to cut dependency to java.desktop module. PR #2967
feat: return all catalogs for getCatalogs metadata query closes ISSUE #2949 PR #2953
feat: support SET statements combining with other queries with semicolon in PreparedStatement PR ##2973

Fixed

chore: add styleCheck Gradle task to report style violations PR #2980
fix: Include currentXid in “Error rolling back prepared transaction” exception message PR #2978
fix: add varbit as a basic type inside the TypeInfoCache PR #2960
fix: Fix failing tests for version 16. PR #2962
fix: allow setting arrays with ANSI type name PR #2952
feat: Use KeepAlive to confirm LSNs PR #2941
fix: put double ’ around log parameter PR #2936 fixes ISSUE #2935
fix: Fix Issue #2928 number of ports not equal to number of servers in datasource PR #2929
fix: Use canonical DateStyle name (#2925) fixes pgbouncer issue
fix: Method getFastLong should be able to parse all longs PR #2881
docs: Fix typos in info.html PR #2860
fix: Return correct default from PgDatabaseMetaData.getDefaultTransactionIsolation PR #2992 fixes Issue #2991

PostgreSQL JDBC Driver 42.6.0 Released

Fri, 17 Feb 2023 15:34:34 -0400

Notable changes

Fixed

fix: use PhantomReferences instead of Object.finalize() to track Connection leaks PR #2847
The change replaces all uses of Object.finalize() with PhantomReferences. The leaked resources (Connections) are tracked in a helper thread that is active as long as there are connections in use. By default, the thread keeps running for 30 seconds after all the connections are released. The timeout is set with pgjdbc.config.cleanup.thread.ttl system property.
refactor:(loom) replace the usages of synchronized with ReentrantLock PR #2635 Fixes Issue #1951

PostgreSQL JDBC Driver 42.5.4 Released

Thu, 16 Feb 2023 08:21:02 -0500

Notable changes

Fixed

fix: fix testGetSQLTypeQueryCache by searching for xid type. We used to search for box type but it is now cached. xid is not cached, this nuance is required for the test.\
fix OidValueCorrectnessTest BOX_ARRAY OID, by adding BOX_ARRAY to the oidTypeName map [PR #2810]((https://github.com/pgjdbc/pgjdbc/pull/2810)
fixes Issue #2804.\
fix: Make sure that github CI runs tests on all PRs #2809.

PostgreSQL JDBC Driver 42.5.3 Released

Fri, 03 Feb 2023 08:24:49 -0500

Fixed

fix: Add box to TypeInfoCache, fixes Issue #2746 PR #2747\
fix: regression in PgResultSet LONG_MIN copy and paste error fixes Issue #2748 PR#2749

PostgreSQL JDBC Driver 42.5.2 Released

Tue, 31 Jan 2023 14:30:44 -0500

Changed

regression: This release has 2 known regressions which make it unusable see the notes in 42.5.3. We advise people not to use 42.5.2.
docs: specify that timeouts are in seconds and there is a maximum. Housekeeping on some tests fixes #Issue 2671 PR #2686\
docs: clarify binaryTransfer and add it to README PR# 2698\
docs: Document the need to encode reserved characters in the connection URL PR #2700\
feat: Define binary transfer for custom types dynamically/automatically fixes Issue #2554 PR #2556

Added

fix: added gssResponseTimeout as part of PR #2687 to make sure we don’t wait forever on a GSS RESPONSE

Fixed

fix: Ensure case of XML tags in Maven snippet is correct PR #2682\
fix: Make sure socket is closed if an exception is thrown in createSocket fixes Issue #2684 PR #2685\
fix: Apply patch from Issue #2683 to fix hanging ssl connections PR #2687\
fix: binary conversion of (very) long numeric values (longer than 4 * 2^15 digits) PR #2697 fixes Issue #2695\
minor: enhance readability connection of startup params PR #2705\
fix: improve thread safety of PgResultSet#getTimestamp PR #2726 fixes Issue #2723

PostgreSQL JDBC Driver 42.5.1 Released

Wed, 23 Nov 2022 10:14:47 -0500

Security

security: StreamWrapper spills to disk if setText, or setBytea sends very large Strings or arrays to the server. createTempFile creates a file which can be read by other users on unix like systems (Not macos).
This has been fixed in this version fixes CVE-2022-41946 see the security advisory for more details.
Reported by Jonathan Leitschuh
This has been fixed in versions 42.5.1, 42.4.3 42.3.8, 42.2.27.jre7.
Note there is no fix for 42.2.26.jre6. See the security advisory for work arounds.

Fixed

fix: make sure we select array_in from pg_catalog to avoid duplicate array_in functions fixes #Issue 2548 PR #2552
fix: binary decoding of bool values PR #2640
perf: improve performance of PgResultSet getByte/getShort/getInt/getLong for float-typed columns PR #2634
chore: fix various spelling errors PR #2592
chore: Feature/urlparser improve URLParser PR #2641

PostgreSQL JDBC Driver 42.5.0 Released

Wed, 24 Aug 2022 08:30:09 -0400

Changed

fix: revert change in PR #1986 where float was aliased to float4 from float8. float now aliases to float8 PR #2598 fixes Issue #2597

PostgreSQL JDBC Driver 42.4.2 Released

Wed, 17 Aug 2022 10:33:37 -0400

Changed

fix: add alias to the generated getUDT() query for clarity PR #2553

Added

fix: make setObject accept UUID array PR #2587

Fixed

fix: regression with GSS. Changes introduced to support building with Java 17 caused failures Issue #2588
fix: set a timeout to get the return from requesting SSL upgrade. PR #2572
feat: synchronize statement executions (e.g. avoid deadlock when Connection.isValid is executed from concurrent threads)

PostgreSQL JDBC Driver 42.4.1 Released

Wed, 03 Aug 2022 08:09:07 -0400

Security

fix: CVE-2022-31197 Fixes SQL generated in PgResultSet.refresh() to escape column identifiers so as to prevent SQL injection.
- Previously, the column names for both key and data columns in the table were copied as-is into the generated SQL. This allowed a malicious table with column names that include statement terminator to be parsed and executed as multiple separate commands.
- Also adds a new test class ResultSetRefreshTest to verify this change.
- Reported by Sho Kato

Changed

chore: skip publishing pgjdbc-osgi-test to Central
chore: bump Gradle to 7.5
test: update JUnit to 5.8.2

Added

chore: added Gradle Wrapper Validation for verifying gradle-wrapper.jar
chore: added “permissions: contents: read” for GitHub Actions to avoid unintentional modifications by the CI
chore: support building pgjdbc with Java 17

PostgreSQL JDBC Driver 42.4.0 Released

Thu, 09 Jun 2022 08:14:50 -0400

Changed

fix: added GROUP_STARTUP_PARAMETERS boolean property to determine whether or not to group startup parameters in a transaction (default=false like 42.2.x) fixes Issue #2425 pgbouncer cannot deal with transactions in statement pooling mode PR #2425

Fixed

fix: queries with up to 65535 (inclusive) parameters are supported now (previous limit was 32767) PR #2525, Issue #1311
fix: workaround JarIndex parsing issue by using groupId/artifactId-version directory namings. Regression since 42.2.13. PR #2531, issue #2527
fix: use Locale. ROOT for toUpperCase() toLowerCase() calls
doc: add Vladimir Sitnikov’s PGP key
fix: return correct base type for domain from getUDTs PR #2520 Issue #2522
perf: utcTz static and renamed to UTC_TIMEZONE PR #2519
doc: fix release version for #2377 (it should be 42.3.6, not 42.3.5)

PostgreSQL JDBC Driver 42.3.6 Released

Tue, 24 May 2022 08:52:25 -0400

Changed

Added

Fixed

fix: close refcursors when underlying cursor==null instead of relying on defaultRowFetchSize PR #2377

PostgreSQL JDBC Driver 42.3.5 Released

Wed, 04 May 2022 08:48:32 -0400

Known issues

Regression since 42.3.2: “cursor <unnamed portal 1> does not exist” when using ResultSet.setFetchSize from CallableStatement, fixed in 42.3.6 (see PG #2377)

Changed

test: polish TimestampUtilsTest
chore: use GitHub Action concurrency feature to terminate CI jobs on fast PR pushes

Added

Added KEYS file to allow for verifying artifacts PR 2499

Fixed

perf: enable tcpNoDelay by default PR 2495. This is a regression from 42.2.x versions where tcpNoDelay defaulted to true
docs: fix readme.md after PR 2495 PR 2496
feat: targetServerType=preferPrimary connection parameter PR 2483
fix: revert removal of toOffsetDateTime(String timestamp) fixes Issue #2497 PR 2501

PostgreSQL JDBC Driver 42.3.4 Released

Fri, 15 Apr 2022 11:00:00 -0400

Known issues

Regression since 42.3.2: “cursor <unnamed portal 1> does not exist” when using ResultSet.setFetchSize from CallableStatement, fixed in 42.3.6 (see PG #2377)

Changed

fix: change name of build cache PR 2471
feat: add support for ResultSet#getObject(OffsetTime.class) and PreparedStatement#setObject(OffsetTime.class) PR 2467
fix: Use non-synchronized getTimeZone in TimestampUtils PR 2451
docs: Fix CHANGELOG.md misformatted markdown headings PR 2461
docs: remove loggerLevel and loggerFile from docs and issues #2489
feat: use direct wire format -> LocalDate conversion without resorting to java.util. Date, java.util. Calendar, and default timezones PR 2464 fixes Issue #2221

Added

Fixed

docs: Update testing documentation PR 2446
fix: Throw an exception if the driver cannot parse the URL instead of returning NULL fixes Issue #2421 PR 2441
fix: Use PGProperty instead of the property names directly PR 2444
docs: update changelog, missing links at bottom and formatting PR 2460
fix: Remove isDeprecated from PGProperty. It was originally intended to help produce automated docs. Fixes #Issue 2479 PR 2480
fix: change PGInterval parseISO8601Format to support fractional second PR 2457
fix: More test and fix for issues discovered by PR #2476 PR #2488

PostgreSQL JDBC Driver 42.3.3 Released

Tue, 15 Feb 2022 11:32:22 -0500

Known issues

Regression since 42.3.2: “cursor <unnamed portal 1> does not exist” when using ResultSet.setFetchSize from CallableStatement, fixed in 42.3.6 (see PG #2377)

Changed

fix: Removed loggerFile and loggerLevel configuration. While the properties still exist. They can no longer be used to configure the driver logging. Instead use java.util.logging configuration mechanisms such as logging.properties .

Added

Fixed

PostgreSQL JDBC Driver 42.2.25 Released

Tue, 01 Feb 2022 07:35:28 -0500

Security

CVE-2022-21724 pgjdbc instantiates plugin instances based on class names provided via authenticationPluginClassName, sslhostnameverifier, socketFactory, sslfactory, sslpasswordcallback connection properties. However, the driver did not verify if the class implements the expected interface before instantiating the class. This would allow a malicious class to be instantiated that could execute arbitrary code from the JVM. Fixed in commit

PostgreSQL JDBC Driver 42.3.2 Released

Tue, 01 Feb 2022 07:35:28 -0500

Known issues

Regression since 42.3.2: “cursor <unnamed portal 1> does not exist” when using ResultSet.setFetchSize from CallableStatement, fixed in 42.3.6 (see PG #2377)

Security

CVE-2022-21724 pgjdbc instantiates plugin instances based on class names provided via authenticationPluginClassName, sslhostnameverifier, socketFactory, sslfactory, sslpasswordcallback connection properties. However, the driver did not verify if the class implements the expected interface before instantiating the class. This would allow a malicious class to be instantiated that could execute arbitrary code from the JVM. Fixed in commit

Changed

perf: read in_hot_standby GUC on connection PR #2334
test: materialized view privileges PR #2209 fixes Issue #2060
docs: add info about convenience maven project PR #2407
docs: Document timezone reversal from POSIX to ISO PR #2413
fix: we will ask the server if it supports GSS Encryption if gssEncryption is prefer or require PR #2396 remove the need to have a ticket in the cache before asking the server if gss encryptions are supported
docs: remove Java 6 and 7 references from contributing PR #2385
style: remove Java 8 / JDBC 4.2 checks PR #2383 Remove all remaining checks whether the source is lower than Java 8 or JDBC 4.2.
fix: throw SQLException for #getBoolean BIT(>1) PR #2386 Throw SQLException instead of ClassCastException when calling CallableStatement#getBoolean(int) on BIT(>1).
style: import java.time types in more classes PR #2382 Use imports for java.time types in all remaining classes.
style: import java.time types in TimestampUtils PR #2380 Use imports for java.time types in TimestampUtils.
refactor: Change internal constructors to pass only connection Properties Changes internal constructors for PgConnection and related classes to only accept the connection properties object and remove the user and password arguments. Any locations that required those fields can retrieve them from the properties map.
test: Fix DatabaseMetadataTest to perform mview tests only on 9.3+
perf: read in_hot_standby GUC on connection PR #2334
doc: improv doc around binary decoding of numeric data #2331
Add cert key type checking to chooseClientAlias PR #2417

Added

feat: Add authenticationPluginClassName option to provide passwords at runtime Adds authenticationPluginClassName connection property that allows end users to specify a class that will provide the connection passwords at runtime. Users implementing that interface must ensure that each invocation of the method provides a new char[] array as the contents will be filled with zeroes by the driver after use. Call sites within the driver have been updated to use the char[] directly wherever possible. This includes direct usage in the GSS authentication code paths that internally were already converting the String password into a char[] for internal usage. This allows configuring a connection with a password that must be generated on the fly or periodically changes. PR #2369 original issue Issue #2102
feat: add tcpNoDelay option PR #2341 fixes Issue #2324
feat: pg_service.conf and .pgpass support (jdbc:postgresql://?service=my-service) PR #2260 fixes Issue #2278

Fixed

Use local TimestampUtil in PgStatement and PgResultset for thread safety PR #2291 fixes Issue #921 synchronize modification of shared calendar
fix: PgObject isNull() was reporting the opposite fixes Issue #2411 PR #2414
fix: default file name is “.pg_service.conf” on Windows (not “pg_service.conf”) PR #2398 fixes Issue #2278
test: Fix RefCursorFetchTest on older platforms
fix: do not close refcursor after reading if fetchsize has been set fixes Issue #2227 PR #2371
fix: rework gss authentication to use the principal name to get the credentials fixes Issue #2235 PR #2352
fix: return getIndexInfo metadata columns in UPPER CASE PR #2368
fix: Connection leak in ConnectionFactoryImpl#tryConnect PR #2350 Issue #2351
fix: Fix For IS_AUTOGENERATED Flag PR #2348
fix: parsing service file tests for windows PR #2347
fix: The spec says that calling close() on a closed connection is a noop. PR #2345 fixes Issue #2300
fix: add microsecond precision to getTimestamp() called on sql TIME(6) Currently, “when fetching a value of type TIME(6) through resultSet.getTimestamp() only ms precision is retained, the microsecond fractional digits are lost.” This change will retain the microsecond precision when .getTimestamp() is called on TIME(6). PR #2181 Closes Issue #1537
test: materialized view privileges PR #2209 add and drop a materialized view Add to TestUtil and also to DatabaseMetaData setup and teardown fixes Issue #2060
fix: typo in connect.md PR #2338 OutOfMemoryException => OutOfMemoryError
fix: use local TimestampUtil in PgStatement and PgResultset for thread safety TimestampUtil is not thread safe. It raises exceptions when multiple threads use ResultSets of one connection. PR #2291 fixes Issue #921 If PgStatement and PgResultSet use their own TimestampUtil no synchronize is needed.
fix: typo in CONTRIBUTING.md PR #2332 seccion => section

PostgreSQL JDBC Driver Log4j CVE status

Wed, 22 Dec 2021 20:32:25 +0000

CVE-2021-44228 status

The pgjdbc team is has reviewed the project and determined that the PostgreSQL JDBC driver is not effected by this CVE. The project has very few runtime dependencies and log4j is not one of them, therefore it does not expose the project to this security issue.

PostgreSQL JDBC Driver 42.3.1 Released

Fri, 29 Oct 2021 15:09:25 +0000

Changed

improv: Arrays in Object[] PR 2330 when an Object[] contains other arrays, treat as though it were a multi-dimensional array the one exception is byte[], which is not supported.
improv: Use jre utf-8 decoding PR 2317 Remove use of custom utf-8 decoding.
perf: improve performance of bytea string decoding PR 2320 improve the parsing of bytea hex encoded string by making a lookup table for each of the valid ascii code points to the 4 bit numeric value
feat: intern/canonicalize common strings PR 2234

Added

Fixed

numeric binary decode for even 10 thousands PR #2327 fixes Issue 2326 binary numeric values which represented integers multiples of 10, 000 from 10, 000-9, 990, 000 were not decoded correctly
[typo] typo in certdir/README.md PR #2309 certificatess => certificates
[typo] typo in TimestampUtils.java PR #2314 Change Greagorian to Gregorian.
remove check for negative pid in cancel request. Apparently pgbouncer can send one fixes Issue 2317 PR #2319

PostgreSQL JDBC Driver 42.3.0 Released

Mon, 18 Oct 2021 15:05:25 +0000

Changed

No longer build for Java 6 or Java 7
If assumeMinServerVersion is not defined and server is at least 9.0, group startup statements into a single transaction PR #1977

Added

Fixed

Rework OSGi bundle activator so it does not rely on exception message to check DataSourceFactory presence PR #507
Fix database metadata getFunctions() and getProcedures() to ignore search_path when no schema pattern is specified PR #2174
Fix refreshRow made the row readOnly. PR #2195 Fixes Issue #2193
Fix do not add double quotes to identifiers already double quoted PR #2224 Fixes Issue #2223 Add a property QUOTE_RETURNING_IDENTIFIERS which determines if we put double quotes around identifiers that are provided in the returning array.
Fix Provide useful error message for empty or missing passwords for SCRAM auth PR #2290 fixes Issue #2288

Contributors to this release

We thank the following people for their contributions to this release.

PostgreSQL JDBC Driver 42.2.24 Released

Wed, 22 Sep 2021 15:30:49 +0000

Fixed

Fix startup regressions caused by PR #1949. Instead of checking all types by OID, we can return types for well known types PR #2257
Backport PR #2148 Avoid leaking server error details through BatchUpdateException when logServerErrorDetail PR #2254
Backpatch PR #2247 QueryExecutorImpl.receiveFastpathResult did not properly handle ParameterStatus messages. This in turn caused failures for some LargeObjectManager operations. Closes Issue #2237 Fixed by adding the missing code path, based on the existing handling in processResults. PR #2253
Backpatch PR #2242 PgDatabaseMetaData.getIndexInfo() cast operands to smallint PR#2253 It is possible to break method PgDatabaseMetaData.getIndexInfo() by adding certain custom operators. This PR fixes it.
Backpatching PR #2251 into 42.2 Clean up open connections to fix test failures on omni and appveyor use older syntax for COMMENT ON FUNCTION with explicit no-arg parameter parentheses as it is required on server versions before v10. Handle cleanup of connection creation in StatementTest, handle cleanup of privileged connection in DatabaseMetaDataTest
Backpatch PR #2245 fixes case where duplicate tables are returned if there are duplicate descriptions oids are not guaranteed to be unique in the catalog PR #2248
Change to updatable result set to use correctly primary or unique keys PR #2228 fixes issues introduced in PR #2199 closes Issue #2196
Fix NPE calling getTypeInfo when alias is null PR #2220
Backpatch PR #2217 to fix Issue #2215. OIDs are unsigned integers and were not being handled correctly when they exceeded the size of signed integers

PostgreSQL JDBC Driver 42.2.23 Released

Tue, 06 Jul 2021 09:17:31 -0400

Changed

renewed the SSL keys for testing

Fixed

getColumnPrecision for Numeric when scale and precision not specified now returns 0 instead of 131089 fixes: Issue #2188
Calling refreshRow on an updateable resultset made the row readOnly. Fixes Issue #2193
results should be updateable if there is a unique index available PR#2199 Fixes Issue #2196
Rework sql type gathering to use OID instead of typname. This does not have the issue of name shadowing / qual-names, and has the added benefit of fixing #1948.

PostgreSQL JDBC Driver 42.2.22 Released

Wed, 16 Jun 2021 10:09:32 -0400

Fixed

Regression caused by https://github.com/pgjdbc/pgjdbc/commit/4fa2d5bc1ed8c0086a3a197fc1c28f7173d53cac. Unfortunately due to the blocking nature of the driver and issues with seeing if there is a byte available on a blocking stream when it is encrypted this introduces unacceptable delays in returning from peek(). At this time there is no simple solution to this.

PostgreSQL JDBC Driver 42.2.21 Released

Thu, 10 Jun 2021 10:08:20 -0400

Changed

update docs to reflect deprecated DataSource API setServerName backpatch PR#2057 PR #2105

Added

Fixed

make sure the table has defined primary keys when using updateable resultset backpatch PR#2101 fixes Issue 1975 PR #2106
backpatch PR #2143 read notifies or errors that come in asynchronously after the ready for query PR #2168
backpatch PR #507 which reworks OSGI bundle activator fixes ISSUE #2133
Fix database metadata getFunctions() and getProcedures() to ignore search_path when no schema pattern is specified. backpatch PR #2174 fixes Issue 2173

PostgreSQL JDBC Driver 42.2.20 Released

Mon, 19 Apr 2021 15:38:28 -0400

Changed

Added

Fixed

fix: Partitioned indexes were not found fixes #2078 PR #2087
isValid() timeout should not be blocked #1943 Cherry-picked #2076 The usage of setQueryTimeout(); with the same value as the setNetworkTimeout(); is blocking the current transaction timeout. The timeouts are blocking each other with this approach.
DatabaseMetaData.getTables returns columns in UPPER case as per the spec PR #2092 fixes Issue #830

PostgreSQL JDBC Driver 42.2.19 Released

Thu, 18 Feb 2021 14:25:56 +0000

Changed

Now the driver uses SASLprep normalization for SCRAM authentication fixing some issues with spaces in passwords.
Fix: Actually close unclosed results. Previously was not closing the first unclosed result fixes #1903 (#1905) There is a small behaviour change here as a result. If closeOnCompletion is called on an existing statement and the statement is executed a second time it will fail.

Added

Verify code via forbidden-apis (jdk-internal and jdk-non-portable signatures) PR #2012

Fixed

Fix: properly set cancel socket timeout (#2044)
Fix “Required class information missing” when old org.jboss:jandex parses pgjdbc classes [issue 2008][https://github.com/pgjdbc/pgjdbc/issues/2008]
Fix PGCopyInputStream returning the last row twice when reading with CopyOut API [issue 2016][https://github.com/pgjdbc/pgjdbc/issues/2016]
Fix Connnection.isValid() to not wait longer than existing network timeout PR #2040
Fix Passwords with spaces (ASCII and non-ASCII) now work with SCRAM authentication (driver now uses SASLprep normalization) PR #2052
Fix DatabaseMetaData.getTablePrivileges() to include views, materialized views, and foreign tables PR #2049

PostgreSQL JDBC Driver 42.2.18 Released

Thu, 15 Oct 2020 14:10:20 +0000

Fixed

Unfortunately changing the default of gssEncMode to ALLOW was not enough. The GSSEncMode Enum was not changed as well fixed in #1920

PostgreSQL JDBC Driver 42.2.17 Released

Fri, 09 Oct 2020 14:24:57 +0000

Changed

Change default of gssEncMode to ALLOW. PostgreSQL can deal with PREFER but there are cloud providers that did not implement the protocol properly. Libpq gets around this by checking for a GSS credential cache before attempting the connection. This is possible in JDK 8 and up, but not JDK6, or JDK7 fixes Issue #1868 PR #1913

Added

Add smallserial metadata [PR #899(https://github.com/pgjdbc/pgjdbc/pull/899)

Fixed

Avoid NullPointerException when receiving PGbox, PGcircle, PGline, PGlseg, PGpath, PGpoint, PGpolygon, and PGmoney [PR 1873] (https://github.com/pgjdbc/pgjdbc/pull/1873)..
The driver returns enum and jsonb arrays elements as String objects (like in 42.2.14 and earlier versions) PR 1879.
PgTokenizer was ignoring last empty token PR #1882
Remove osgi from karaf fixes Issue #1891 PR #1902

PostgreSQL JDBC Driver 42.2.16 Released

Thu, 20 Aug 2020 15:10:04 +0000

Known issues

The driver returns enum and jsonb arrays elements are returned as PGobject instances (fixed in 42.2.17)

Fixed

Arrays sent in binary format are now sent as 1 based. This was a regression for multi-dimensional arrays as well as text/varchar, oid and bytea arrays. Since 42.2.0 single dimensional arrays were stored 0 based. They are now sent 1 based which is the SQL standard, and the default for Postgres when sent as strings such as ‘{1, 2, 3}’. Fixes issue 1860 in PR 1863.

PostgreSQL JDBC Driver 42.2.15 Released

Fri, 14 Aug 2020 21:39:56 +0300

Known issues

The driver returns enum and jsonb arrays elements are returned as PGobject instances (fixed in 42.2.17)

Changed

Rename source distribution archive to postgresql-$version-jdbc-src.tar.gz, and add top-level archive folder ba017507
Add the ability to connect with a GSSAPI encrypted connection. As of PostgreSQL version 12 GSSAPI encrypted connections are possible. Now the driver will attempt to connect to the server with a GSSAPI encrypted connection. If that fails then attempt an SSL connection, finally falling back to a plain text connection. All of this is controlled using both the gssEncMode and sslMode parameters which, in concert with pg_hba.conf, determine if a particular mode is allowed and or required. PR 1821 ad921b9e
Source release archive shades dependencies (scram) by default. It affects only postgresql-version-src.tar.gz release artifact f0301eb9
Refactor decoding arrays PR 1194 0fd09396

Added

Verify nullness with CheckerFramework 6e524ae5

Fixed

Avoid preparedStatement leak when using updateable ResultSet via insert/update/refreshRow PR 1815 9a0d2b18
Change order of checks for oid vs primary keys. OID’s have been deprecated. PR 1613
Close certificate file stream. PR 1837 a40052c9
Make sure socketTimeout is enforced PR 1831 210b27a6
Assume PKCS-8 SSL key format by default PR 1819 80d4ed34
Preserve unquoted unicode whitespace in array literals PR 1266

PostgreSQL JDBC Driver 42.2.14 Released

Wed, 10 Jun 2020 17:08:52 +0300

Changed

Reverted com.github.waffle:waffle-jna, org.osgi:org.osgi.core, org.osgi:org.osgi.enterprise dependencies to optional=true in Maven PR 1797.

PostgreSQL JDBC Driver 42.2.13 Released

Thu, 04 Jun 2020 08:24:40 -0400

The primary reason to release this version and to continue the 42.2.x branch is for CVE-2020-13692. Reported by David Dworken this is an XXE and more information can be found here Sehrope Sarkuni reworked the XML parsing to provide a solution in commit 14b62aca4 The build system has been changed to Gradle thanks to Vladimir PR 1627 Regression: com.github.waffle:waffle-jna, org.osgi:org.osgi.core, org.osgi:org.osgi.enterprise dependencies are listed as non-optional issue 1975.

Added

jre-6 was added back to allow us to release fixes for all artifacts in the 42.2.x branch PR 1787

Fixed

I/O error ru translation PR 1756
Issue 1771 PgDatabaseMetaData.getFunctions() returns procedures fixed in PR 1774
getTypeMap() returning null PR 1781
Updated openssl example command PR 1763
fix documentation with ordered list to be displayed correctly PR 1783

PostgreSQL JDBC Driver 42.2.12 Released

Tue, 31 Mar 2020 13:06:22 +0000

Changed

reverted PR 1729 throw an error instead of silently rolling back a commit error. This change introduced a breaking change which will be moved to 42.3.0
reverted PR 1719 add support for full names of data types (#1719)

PostgreSQL JDBC Driver 42.2.11 Released

Tue, 10 Mar 2020 00:00:00 +0300

We have released 42.2.12 to correct regressions in this version: Specifically

PR 1729 was reverted as this is a breaking change
PR 1719 has been reverted as it introduced errors in the PgType Cache

We recommend that this version 42.2.11 not be used.

Changed

Reverted PR 1641. The driver will now wait for EOF when sending cancel signals.
DatabaseMetaData#getProcedures returns only procedures (not functions) for PostgreSQL 11+ PR 1723
Convert silent rollbacks into exception if application sends commit or xa.prepare command PR 1729

Added

Convert silent rollbacks into exception if application sends commit or xa.prepare command PR 1729
feat: Expose ByteStreamWriter in CopyManager PR 1702
feat: add way to distinguish base and partitioned tables in PgDatabaseMetaData.getTables PR 1708
refactor: introduce tuple abstraction (rebased) PR 1701
refactor: make PSQLState enum consts for integrity constraint violations PR 1699
test: add makefile to create ssl certs PR 1706

Fixed

fix: Always use . as decimal separator in PGInterval PR 1705
fix: allow DatabaseMetaData.getColumns to describe an unset scale PR 1716

PostgreSQL JDBC Driver 42.2.10 Released

Thu, 30 Jan 2020 20:12:11 +0000

Changed

(!) Regression: remove receiving EOF from backend after cancel PR 1641. The regression is that the subsequent query might receive the cancel signal.

Added

Add maxResultBuffer property PR 1657
add caller push of binary data (rebase of #953) PR 1659

Fixed

Cleanup PGProperty, sort values, and add some missing to docs PR 1686
Fixing LocalTime rounding (losing precision) PR 1570
Network Performance of PgDatabaseMetaData.getTypeInfo() method PR 1668
Issue #1680 updating a boolean field requires special handling to set it to t or f instead of true or false PR 1682
bug in pgstream for replication PR 1681
Issue #1677 NumberFormatException when fetching PGInterval with small value PR 1678
Metadata queries improvements with large schemas. PR 1673
Utf 8 encoding optimizations PR 1444
interval overflow PR 1658
Issue #1482 where the port was being added to the GSSAPI service name PR 1651
remove receiving EOF from backend after cancel since according to protocol the server closes the connection once cancel is sent (connection reset exception is always thrown) PR 1641
Unable to register out parameter Issue #1646 PR 1648

[42.2.9] (2019-12-06)

Changed

Added

read only transactions PR 1252
pkcs12 key functionality PR 1599
new “escapeSyntaxCallMode” connection property PR 1560
connection property to limit server error detail in exception exceptions PR 1579
cancelQuery() to PGConnection public interface PR 1157
support for large update counts (JDBC 4.2) PR 935
Add Binary Support for Oid. NUMERIC and Oid. NUMERIC_ARRAY PR 1636

Fixed

issue 716 getTypeInfo() may not return data in the order specified in Oracle documentation PR 1506
PgSQLXML setCharacterStream() results in null value PR 1608
get correct column length for simple domains PR 1605
NPE as a result of calling executeQuery twice on a statement fixes issue #684 [PR 1610] (https://github.com/pgjdbc/pgjdbc/pull/1610)
handle numeric domain types PR 1611
pginterval to take iso8601 strings PR 1612
remove currentTimeMillis from code, tests are OK PR 1617
NPE when calling setNull on a PreparedStatement with no parameters PR 1620
allow OUT parameter registration when using CallableStatement native CALL PR 1561
add release save point into execute with batch PR 1583
Prevent use of extended query protocol for BEGIN before COPY PR 1639

PostgreSQL JDBC Driver 42.2.9 Released

Fri, 06 Dec 2019 17:52:49 +0000

Changed

Added

read only transactions PR 1252
pkcs12 key functionality PR 1599
new “escapeSyntaxCallMode” connection property PR 1560
connection property to limit server error detail in exception exceptions PR 1579
cancelQuery() to PGConnection public interface PR 1157
support for large update counts (JDBC 4.2) PR 935
Add Binary Support for Oid. NUMERIC and Oid. NUMERIC_ARRAY PR 1636

Fixed

issue 716 getTypeInfo() may not return data in the order specified in Oracle documentation PR 1506
PgSQLXML setCharacterStream() results in null value PR 1608
get correct column length for simple domains PR 1605
NPE as a result of calling executeQuery twice on a statement fixes issue #684 [PR 1610] (https://github.com/pgjdbc/pgjdbc/pull/1610)
handle numeric domain types PR 1611
pginterval to take iso8601 strings PR 1612
remove currentTimeMillis from code, tests are OK PR 1617
NPE when calling setNull on a PreparedStatement with no parameters PR 1620
allow OUT parameter registration when using CallableStatement native CALL PR 1561
add release save point into execute with batch PR 1583
Prevent use of extended query protocol for BEGIN before COPY PR 1639

PostgreSQL JDBC Driver 42.2.8 Released

Fri, 13 Sep 2019 13:23:26 +0000

Changed

Added

Fixed

PostgreSQL JDBC Driver 42.2.7 Released

Tue, 10 Sep 2019 13:50:37 +0000

Changed

Added

Expose parameter status messages (GUC_REPORT) to the user PR 1435
Add automatic module name to manifest for jdk9+ PR 1538
Log ignoring rollback when no transaction in progress PR 1549
Map inet type to InetAddress PR 1527 issue 1134

Fixed

fix issue 1547 As long as peek returns some bytes do not reset the timeout, this allows us to continue checking until any async notifies are consumed PR 1548
fix: issue 1466 In logical decoding the if the backend was requesting a reply we… PR 1467
fix: issue 1534 Proleptic java.time support PR 1539
fix Ensure isValid() will not last more than timeout seconds PR 1557

PostgreSQL JDBC Driver 42.2.6 Released

Wed, 19 Jun 2019 00:06:55 +0300

Known issues

Waffle has dropped support for 1.6, 1.7 as such the new waffle 1.9.x is only available in jre8
Microseconds in timestamps might be truncated when transferred in binary mode
24:00 time handling is not consistent issue 1385
Unexpected packet type during stream replication issue 1466
Driver goes missing after OSGi bundle restart issue 1476

Changed

Change IS_GENERATED to IS_GENERATEDCOLUMN as per spec PR 1485
Fix missing metadata columns, and misspelled columns in PgDatabaseMetaData#getTables PR 1323

Added

CI tests with Java 11, and Java EA
Support temporary replication slots in ReplicationCreateSlotBuilder PR 1306
Support PostgreSQL 11, 12
Return function (PostgreSQL 11) columns in PgDatabaseMetaData#getFunctionColumns
Return information on create replication slot, now the snapshot_name is exported to allow a consistent snapshot in some uses cases. PR 1335

Fixed

Fixed async copy performance (1ms per op) in SSL mode PR 1314
Return Double. NaN for ‘NaN’::numeric PR 1304
Performance issue in PgDatabaseMetaData#getTypeInfo with lots of types in DB PR 1302
PGCopyInputStream#read should cap values to [0, 255], -1 PR 1349
Fixes LocalDateTime handling of BC dates PR 1388
Release savepoints in autosave mode to prevent out of shared memory errors at the server side PR 1409
Fix execution with big decimal in simple query mode. PR 1463
Fix rounding for timestamps truncated to dates before 1970 PR 1502

PostgreSQL JDBC Driver 42.2.5 Released

Mon, 27 Aug 2018 18:21:38 +0300

Known issues

1ms per async copy call issue 1312

Changed

ssl=true implies sslmode=verify-full, that is it requires valid server certificate cdeeaca4

Added

Support for sslmode=allow/prefer/require cdeeaca4

Fixed

Security: added server hostname verification for non-default SSL factories in sslmode=verify-full (CVE-2018-10936) cdeeaca4
Updated documentation on SSL configuration fa032732
Updated Japanese translations PR 1275
IndexOutOfBounds on prepared multistatement with insert values c2885dd0

PostgreSQL JDBC Driver 42.2.4 Released

Sat, 14 Jul 2018 19:02:04 +0300

Changed

PreparedStatement.setNull(int parameterIndex, int t, String typeName) no longer ignores the typeName argument if it is not null PR 1160

Fixed

Fix treatment of SQL_TSI_YEAR, SQL_TSI_WEEK, SQL_TSI_MINUTE PR 1250
Map integrity constraint violation to XA_RBINTEGRITY instead of XAER_RMFAIL PR 1175 f2d1352c

PostgreSQL JDBC Driver 42.2.3 Released

Thu, 12 Jul 2018 12:02:03 +0300

Known issues

SQL_TSI_YEAR is treated as hour, SQL_TSI_WEEK is treated as hour, SQL_TSI_MINUTE is treated as second (fixed in 42.2.4)

Changed

Reduce the severity of the error log messages when an exception is re-thrown. The error will be thrown to caller to be dealt with so no need to log at this verbosity by pgjdbc PR 1187
Deprecate Fastpath API PR 903
Support parenthesis in {oj …} JDBC escape syntax PR 1204
ubenchmark module moved pgjdbc/benchmarks repository due to licensing issues PR 1215
Include section on how to submit a bug report in CONTRIBUTING.md PR 951

Fixed

getString for PGObject-based types returned “null” string instead of null PR 1154
Field metadata cache can be disabled via databaseMetadataCacheFields=0 PR 1052
Properly encode special symbols in passwords in BaseDataSource PR 1201
Adjust date, hour, minute, second when rounding nanosecond part of a timestamp PR 1212
perf: reduce memory allocations in query cache PR 1227
perf: reduce memory allocations in SQL parser PR 1230, PR 1233
Encode URL parameters in BaseDataSource PR 1201
Improve JavaDoc formatting PR 1236

PostgreSQL JDBC Driver 42.2.2 Released

Thu, 15 Mar 2018 18:55:14 +0300

Added

Documentation on server-side prepared statements PR 1135

Fixed

Avoid failure for insert ... on conflict...update for reWriteBatchedInserts=true case PR 1130
fix: allowEncodingChanges should allow set client_encoding=… PR 1125
Wrong data from Blob/Clob when mark/reset is used PR 971
Adjust XAException return codes for better compatibility with XA specification PR 782
Wrong results when single statement is used with different bind typesPR 1137
Support generated keys for WITH queries that miss RETURNING PR 1138
Support generated keys when INSERT/UPDATE/DELETE keyword is followed by a comment PR 1138

PostgreSQL JDBC Driver 42.2.1 Released

Thu, 25 Jan 2018 19:30:35 +0300

Known issues

client_encoding has to be UTF8 even with allowEncodingChanges=true

Changed

socksProxyHost is ignored in case it contains empty string PR 1079

Fixed

Avoid connection failure when DateStyle is set to ISO (~PgBouncer) Issue 1080
Package scram:client classes, so SCRAM works when using a shaded jar PR 1091 1a89290e
reWriteBatchedInserts=true causes syntax error with ON CONFLICT Issue 1045 PR 1082
Avoid failure in getPGArrayType when stringType=unspecified PR 1036

PostgreSQL JDBC Driver 42.2.0 Released

Wed, 17 Jan 2018 20:11:10 +0300

Known issues

SCRAM authentication does not work as scram client classes are not packaged
client_encoding has to be UTF8 even with allowEncodingChanges=true

Added

Support SCRAM-SHA-256 for PostgreSQL 10 in the JDBC 4.2 version (Java 8+) using the Ongres SCRAM library. PR 842
Make SELECT INTO and CREATE TABLE AS return row counts to the client in their command tags. Issue 958 PR 962
Support Subject Alternative Names for SSL connections. PR 952
Support isAutoIncrement metadata for PostgreSQL 10 IDENTITY column. PR 1004
Support for primitive arrays PR 887 3e0491a
Implement support for get/setNetworkTimeout() in connections. PR 849
Make GSS JAAS login optional, add an option “jaasLogin” PR 922 see Connecting to the Database

Changed

Improve behaviour of ResultSet.getObject(int, Class). PR 932
Parse CommandComplete message using a regular expression, allows complete catch of server returned commands for INSERT, UPDATE, DELETE, SELECT, FETCH, MOVE, COPY and future commands. PR 962
Use ’time with timezone’ and ’timestamp with timezone’ as is and ignore the user provided Calendars, ’time’ and ’timestamp’ work as earlier except “00:00:00” now maps to 1970-01-01 and “24:00:00” uses the system provided Calendar ignoring the user-provided one PR 1053
Change behaviour of multihost connection. The new behaviour is to try all secondaries first before trying the master PR 844.
Avoid reflective access to TimeZone.defaultTimeZone in Java 9+ PR 1002 fixes Issue 986

Fixed

Make warnings available as soon as they are received from the server. This is useful for long running queries, where it can be beneficial to know about a warning before the query completes. PR 857
Use 00:00:00 and 24:00:00 for LocalTime. MIN/MAX. PR 992
Now the DatabaseMetaData.getFunctions() implementation complies with the JDBC docs. PR 918
Execute autosave/rollback savepoint via simple queries always to prevent “statement S_xx not exists” when autosaving fixes Issue #955
Received resultset tuples, but no field structure for them" when bind failure happens on 5th execution of a statement Issue 811

Removed

Drop support for the (insecure) crypt authentication method. PR 1026

Deprecated

Reintroduce Driver.getVersion for backward compatibility reasons, mark it as deprecated as application should not rely on it (regression since 42.0.0) 50d5dd3e
slave and preferSlave values for the targetServerType connection property have been deprecated in favour of secondary and preferSecondary respectively.

PostgreSQL JDBC Driver 42.1.4 Released

Tue, 01 Aug 2017 20:00:00 +0300

Changed

Statements with non-zero fetchSize no longer require server-side named handle. This might cause issues when using old PostgreSQL versions (pre-8.4)+fetchSize+interleaved ResultSet processing combo. Issue 869

PostgreSQL JDBC Driver 42.1.3 Released

Fri, 14 Jul 2017 10:49:13 +0300

Fixed

Fix NPE in PreparedStatement.executeBatch in case of empty batch (regression since 42.1.2). PR 867

PostgreSQL JDBC Driver 42.1.2 Released

Wed, 12 Jul 2017 18:11:06 +0300

Changed

Better logic for returning keyword detection. Previously, pgjdbc could be defeated by column names that contain returning, so pgjdbc failed to “return generated keys” as it considered statement as already having returning keyword PR 824 201daf1d
Use server-prepared statements for batch inserts when prepareThreshold>0. Note: this enables batch to use server-prepared from the first executeBatch() execution (previously it waited for prepareThreshold executeBatch() calls) abc3d9d7

Fixed

Replication API: fix issue in #834 setting statusIntervalUpdate causes high CPU load. PR 835 59236b74

Regressions

NPE in PreparedStatement.executeBatch in case of empty batch. Fixed in 42.1.3

PostgreSQL JDBC Driver 42.1.1 Released

Fri, 05 May 2017 00:00:00 +0300

Fixed

Fix infinite dates that might be corrupted when transferred in binary for certain JREs. For instance, 5881610-07-11 instead of infinity. 1e5bf563

PostgreSQL JDBC Driver 42.1.0 Released

Thu, 04 May 2017 00:00:00 +0300

Added

Support fetching a REF_CURSOR using getObject PR 809

Fixed

Fix data being truncated in setCharacterStream (bug introduced in 42.0.0) PR 802
Fix calculation of lastReceiveLSN for logical replication PR 801
Make sure org.postgresql. Driver is loaded when accessing though DataSource interface Issue 768

Regressions

There’s no 42.1.0.jre6 version due to infinity handling bug. Fixed in 42.1.1.jre6

PostgreSQL JDBC Driver 42.0.0 Released

Mon, 20 Feb 2017 00:00:00 +0300

Added

Replication protocol API was added: replication API documentation. PR 550
java.util.logging is now used for logging: logging documentation. PR 722
Add support for PreparedStatement.setCharacterStream(int, Reader). ee4c4265

Changed

Version bumped to 42.0.0 to avoid version clash with PostgreSQL version and follow a better semantic versioning. 46634923
Ensure executeBatch() can be used with pgbouncer. Previously pgjdbc could use server-prepared statements for batch execution even with prepareThreshold=0. Issue 742
Error position is displayed when SQL has unterminated literals, comments, etc. Issue 688
Strict handling of accepted values in getBoolean and setObject(BOOLEAN), now it follows PostgreSQL accepted values, only 1 and 0 for numeric types are accepted (previously !=0 was true). PR 732
Return correct versions and name of the driver. PR 668

Removed

Support for PostgreSQL versions below 8.2 was dropped. PR 661

Deprecated

Deprecated PGPoolingDataSource, instead of this class you should use a fully featured connection pool like HikariCP, vibur-dbcp, commons-dbcp, c3p0, etc. PR 739

Regressions

Data truncated in setCharacterStream. Fixed in 42.1.0
No suitable driver found for jdbc:postgresql when using a DataSource implementation. Fixed in 42.1.0

You may have noticed the change in the versioning of the driver, you can read the FAQ for more information.

Home on pgJDBC

Setting up the JDBC Driver

Getting the Driver

Initializing the Driver

Importing JDBC

Using SSL

Custom SSLSocketFactory

Issuing a Query and Processing the Result

Example 5.1. Processing a Simple Query in JDBC

Calling Stored Functions and Procedures

Storing Binary Data

JDBC escapes

PostgreSQL® Extensions to the JDBC API

Accessing the Extensions

Using the Driver in a Multithreaded or a Servlet Environment

Connection Pools and Data Sources

Logging using java.util.logging

Further Reading

PostgreSQL JDBC Driver 42.7.13 Released

PostgreSQL JDBC Driver 42.7.12 Released

PostgreSQL JDBC Driver 42.7.11 Released

PostgreSQL JDBC Driver 42.7.10 Released

Changed

Fixed

Reverted

PostgreSQL JDBC Driver 42.7.9 Released

Added

Changed

Fixed

PostgreSQL JDBC Driver 42.7.8 Released

Added

Changed

Fixed

PostgreSQL JDBC Driver 42.7.7 Released

Security

PostgreSQL JDBC Driver 42.7.6 Released

Features

Performance Improvements

Bug Fixes

Protocol & Connection Handling

Metadata & Catalog Handling

API Improvements

Infrastructure & Build Improvements

Java Support

Testing & Quality

Code Quality

Dependency Updates

Documentation

Removed

PostgreSQL JDBC Driver 42.7.5 Released

Added

Fixed

PostgreSQL JDBC Driver 42.7.4 Released

Added

Fixed

Deprecated

PostgreSQL JDBC Driver 42.7.3 Released

Changed

Fixed

PostgreSQL JDBC Driver 42.6.2 Released

Fixed

PostgreSQL JDBC Driver 42.4.5 Released

Fixed

PostgreSQL JDBC Driver 42.3.10 Released

Fixed

PostgreSQL JDBC Driver 42.2.29 Released

Fixed

PostgreSQL JDBC Driver 42.5.6 Released

Fixed

PostgreSQL JDBC Driver 42.2.28 Released

Security

PostgreSQL JDBC Driver 42.3.9 Released

Security

PostgreSQL JDBC Driver 42.4.4 Released

Security

PostgreSQL JDBC Driver 42.5.5 Released

Security

PostgreSQL JDBC Driver 42.6.1 Released

Security

PostgreSQL JDBC Driver 42.7.2 Released