In triaging a reported issue I ended up having to once again delve into investigating PostgreSQL BLOB suppport. So for the sake of posterity and for the sake of my swiss cheese memory I decided to record my findings here.
Atlassian and Contegix (who together make the Hibernate JIRA possible) have found evidence that the Hibernate JIRA has been compromised through the recent JIRA exploit affecting numerous Open Source JIRA instances.
I am pleased to announce that we have just released Hibernate version 3.5.0-CR-1. As a refresher, Hibernate follows the JBoss versioing scheme where CR is a Candidate for Release (what many of you might call RC). The main stated goal of 3.5 is JPA 2 compliance. This is the first release we believe achieves that goal entirely. In fact we are in the process of certifying for standalone JPA 2 compliance and have integrated this CR into the imminent JBoss AS M2 release as part of their effort towards full Java EE 6 compliance.