> For the complete documentation index, see [llms.txt](https://mariadb.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mariadb.com/docs/release-notes/connectors/java/3.5/3.5.11.md).

# Connector/J 3.5.11 Release Notes

MariaDB Connector/J 3.5.11 is a Stable (GA) release of MariaDB Connector/J 3.5, released on 2026-10-21

{% hint style="info" %}

<p align="center">The most recent release of <a href="/docs/connectors/mariadb-connector-j.md">MariaDB Connector/J</a> is: <a href="/docs/release-notes/connectors/java/4.0/4.0.0.md"><strong>4.0.0</strong></a></p>

<p align="center"><a href="https://mariadb.com/downloads/connectors/connectors-data-access/java8-connector" class="button primary">Download Connector/J 4.0.0</a></p>
{% endhint %}

<a href="https://mariadb.com/downloads/connectors/connectors-data-access/java8-connector" class="button primary">Download</a> <a href="/docs/release-notes/connectors/java/3.5/3.5.11.md" class="button secondary">Release Notes</a> <a href="/docs/release-notes/connectors/java/changelogs/3.5/3.5.11.md" class="button secondary">Changelog</a> <a href="/docs/connectors/mariadb-connector-j/about-mariadb-connector-j.md" class="button secondary">Connector/J Overview</a>

**Release date:** 21 Oct 2026

MariaDB Connector/J 3.5.11 is a [***Stable***](/docs/release-notes/community-server/about/release-criteria.md) ***(GA)*** release.

{% hint style="info" %}
**For an overview of MariaDB Connector/J see the** [**About MariaDB Connector/J**](/docs/connectors/mariadb-connector-j/about-mariadb-connector-j.md) **page**
{% endhint %}

## Key Enhancements

* [CONJ-1386](https://jira.mariadb.org/browse/CONJ-1386) - New `sslMode=allow` value: `verify-full` when the server announces TLS, unencrypted otherwise, for a mix of servers with and without TLS behind one connection string; the choice is made from the capability flags the server sends in clear, so an active attacker can downgrade the connection; this is a migration mode, to be replaced by `verify-full` once every server has TLS
* [CONJ-1353](https://jira.mariadb.org/browse/CONJ-1353) - Generate a CycloneDX 1.6 SBOM meeting the CISA 2026 minimum elements
* [CONJ-1356](https://jira.mariadb.org/browse/CONJ-1356) - parsec authentication no longer requires BouncyCastle on Java 8 and Java 11, and no longer depends on provider-specific key derivation
* [CONJ-1355](https://jira.mariadb.org/browse/CONJ-1355) - Add `NonRegisteringDriver`, so that `MariaDbDataSource` and `MariaDbPoolDataSource` never register the driver in `DriverManager`, which pinned the class loader when an application server redeployed the application (report by mario-schwede-hivemq)
* [CONJ-1348](https://jira.mariadb.org/browse/CONJ-1348) - Reassembling packets larger than 16MB copied the accumulated content once per fragment

## Bugs Fixed

* [CONJ-1383](https://jira.mariadb.org/browse/CONJ-1383) - Connection initialization rebuilds `session_track_system_variables` from `@@global`, discarding the session-level `last_gtid` set by MaxScale (report by Sawan Patel)
* [CONJ-1379](https://jira.mariadb.org/browse/CONJ-1379) - Set an explicit session tracking list and guard `character_set_results` like `character_set_client` (report by fg0x0)
* [CONJ-1381](https://jira.mariadb.org/browse/CONJ-1381) - Bound server-declared lengths by the packet before allocating and reading from them (report by fg0x0)
* [CONJ-1357](https://jira.mariadb.org/browse/CONJ-1357) - XA `recover()` must not trust the server-supplied `gtrid_length` and `bqual_length` (report by fg0x0)
* [CONJ-1374](https://jira.mariadb.org/browse/CONJ-1374) - Redirect URL password partially logged when it contains `@` (report by manus-pi)
* [CONJ-1372](https://jira.mariadb.org/browse/CONJ-1372) - `caching_sha2_password` full authentication fails over a Unix socket when SSL is disabled (report by 工藤航)
* [CONJ-1360](https://jira.mariadb.org/browse/CONJ-1360) - Incorrect dependency check in `AwsIamCredentialPlugin` (report by Dheeraj Nalluri)
* [CONJ-1358](https://jira.mariadb.org/browse/CONJ-1358) - The client-side query timeout thread cannot be stopped and outlives an idle driver
* [CONJ-1352](https://jira.mariadb.org/browse/CONJ-1352) - Batched statements fail when a trigger produces a result set (report by Christopher Schultz)
* [CONJ-1351](https://jira.mariadb.org/browse/CONJ-1351) - Reading an invalid `DATE` value might throw unchecked exceptions instead of `SQLException`
* [CONJ-1346](https://jira.mariadb.org/browse/CONJ-1346) - Log-and-throw antipattern: server errors and host name verification failures are logged at DEBUG instead of WARN or INFO (report by Alexander Schwartz)
* [CONJ-1345](https://jira.mariadb.org/browse/CONJ-1345) - `DatabaseMetaData.getURL()` exposes the database password since Connector/J 3.5.10 (report by Klaas)
* [CONJ-1344](https://jira.mariadb.org/browse/CONJ-1344) - `DatabaseMetaData` imported and exported keys ignore `lower_case_table_names` when using `SHOW CREATE TABLE` (report by plantegg ren)
* [CONJ-1343](https://jira.mariadb.org/browse/CONJ-1343) - `DatabaseMetaData.getSQLKeywords()` includes eight pairs of concatenated words (report by Adam Rauch)
* [CONJ-1349](https://jira.mariadb.org/browse/CONJ-1349) - `DatabaseMetaData.getBestRowIdentifier()` returns primary key columns in an undefined order

## Changelog

For a complete list of changes made in MariaDB Connector/J 3.5.11, with links to detailed information on each push, see the [changelog](/docs/release-notes/connectors/java/changelogs/3.5/3.5.11.md).

<sub>*This page is: Copyright © 2026 MariaDB. All rights reserved.*</sub>

{% @marketo/form formid="4316" formId="4316" %}