[1.7.32] - 2026-02-04
Changed
- Upgrade base docker images from Debian Bookworm to Trixie.
- Upgrade Go packages. (CNJR-7655)
Security
- Add message length limits to PostgreSQL protocol handler to prevent potential
denial-of-service via memory exhaustion. Startup messages are limited to 10KB
(matching PostgreSQL's MAX_STARTUP_PACKET_LENGTH) and authentication messages
are limited to 64KB (matching PostgreSQL's PG_MAX_AUTH_TOKEN_LENGTH). (CONJSE-2078)