Visit NES for PostgreSQL JDBC Driver Home Page
NES for PostgreSQL JDBC Driver 42.3.x Release Notes
2 versions
Comprehensive release notes and changelog for NES for PostgreSQL JDBC Driver 42.3.x, including security patches, bug fixes, and feature updates across all supported versions.
October 2026
42.3.12
Released Oct 16, 2026 Full Version:
42.3.10-pgjdbc-42.3.12
Security Fixes
- A PostgreSQL server can no longer drive the driver into unbounded PBKDF2 work during SCRAM authentication.
ScramAuthenticatornow compares the server's advertised iteration count against a client-side cap before it computes the password proof, and fails the handshake when the count is higher (CVE-2026-42198, HIGH).
Connection Property Changes
The fix adds a scramMaxIterations connection property, with a default of 100000. PostgreSQL's own scram_iterations default is 4096, so the cap is well clear of a normal server. A server configured above it needs scramMaxIterations raised to match; 0 disables the cap, and a negative value is rejected. The property is also exposed on BaseDataSource.
42.3.11
Released Oct 15, 2026 Full Version:
42.3.10-pgjdbc-42.3.11
Notes
- This release originates from the open-source PostgreSQL JDBC Driver project forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
- This is the initial supported baseline for the 42.3.x line. It is functionally identical to upstream 42.3.10, with no behavioral changes, and contains no vulnerability patches. Security fixes are delivered in subsequent releases on this line.
Stay in the loop
~/herodevs-spring-framework-support
herodevs@nes:open-source$ ./display-support-info.sh