Connector/J 3.4.3 Release Notes

The most recent release of MariaDB Connector/J is: 3.5.9

Download Connector/J 3.5.9

Download Release Notes Changelog Connector/J Overview

Release date: 15 Jun 2026

MariaDB Connector/J 3.4.3 is a Stable (GA) release.

For an overview of MariaDB Connector/J see the About MariaDB Connector/J page

Bugs Fixed

• CONJ-1320 - PAM (dialog) authentication now requires a secure connection (TLS or unix socket), like mysql_clear_password (report by fg0x0)

• CONJ-1319 - Use constant-time comparison when validating the server certificate fingerprint (report by jmestwa-coder)

• CONJ-1322 - Match LOAD LOCAL INFILE filename case-sensitively (thanks to jmestwa-coder)

• CONJ-1323 - LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)

• CONJ-1315 - Cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion in case of a man-in-the-middle (report by tonghuaroot)

• CONJ-1317 - Ensure a non-UTF-8 character set cannot be used for protocol exchanges (report by fg0x0)

• CONJ-1316 - Pin Locale.ROOT on locale-sensitive call sites and date/time/Duration text formatting (fixes locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)

• CONJ-1259 - DatabaseMetaData read-only detection: handle MariaDB 12.0 @@read_only returning ON/OFF instead of 1/0

• CONJ-1318 - allowLocalInfile=false does not block LOAD DATA LOCAL INFILE against a malicious server (thanks to tharavel)

Changelog

For a complete list of changes made in MariaDB Connector/J 3.4.3, with links to detailed information on each push, see the changelog.

_{This page is: Copyright © 2025 MariaDB. All rights reserved.}