Connector/J 3.5.9 Release Notes

Download Release Notes Changelog Connector/J Overview

Release date: 15 Jun 2026

MariaDB Connector/J 3.5.9 is a Stable (GA) release.

For an overview of MariaDB Connector/J see the About MariaDB Connector/J page

Key Enhancements

• CONJ-1223 - Cache TLS trust/key managers across connections to reduce SSL connection cost

• CONJ-1314 - Add SPI for interactive dialog (PAM) authentication callback

• CONJ-1311 - Add dedicated option useIpForKillQuery for query cancellation

• CONJ-1310 - Add full native-image (GraalVM) support and CI coverage

Bugs Fixed

• CONJ-1320 - PAM (dialog) authentication must require a secure connection (TLS or unix socket), like mysql_clear_password (report by fg0x0)

• CONJ-1319 - Use constant-time comparison when validating the server certificate fingerprint (report by jmestwa-coder)

• CONJ-1318 - Enforce allowLocalInfile=false on the server's local-infile request, so a malicious server cannot read a client file despite the option being disabled (report by tharavel)

• CONJ-1322 - Match LOAD LOCAL INFILE filename case-sensitively (thanks to jmestwa-coder)

• CONJ-1323 - LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)

• CONJ-1324 - Fix SQL parser to correctly handle -- in expressions and reset lastChar after block comments

• CONJ-1315 - Cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion in case of a man-in-the-middle (report by tonghuaroot)

• CONJ-1317 - Ensure a non-UTF-8 character set cannot be used for protocol exchanges (report by fg0x0)

• CONJ-1316 - Pin Locale.ROOT on locale-sensitive call sites and date/time/Duration text formatting (fixes locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder)

• CONJ-1304 - Read CallableStatement parameter metadata from mysql.proc, with MySQL information_schema fallback

• CONJ-1299 - Keep VALUES literals after the last placeholder when rewriting batches

• CONJ-1313 - Race condition in HaMode#getAvailableHostInOrder can cause a NullPointerException

• CONJ-1311 - Connection.cancelCurrentQuery fails with SslMode.VERIFY_FULL when the client socket IP is set

• CONJ-1264 - Handle LocalDateTime as a zoneless wall-clock value

Changelog

For a complete list of changes made in MariaDB Connector/J 3.5.9, with links to detailed information on each push, see the changelog.

_{This page is: Copyright © 2025 MariaDB. All rights reserved.}