> For the complete documentation index, see [llms.txt](https://mariadb.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://mariadb.com/docs/release-notes/connectors/java/3.5/3.5.9.md).
# Connector/J 3.5.9 Release Notes
Download Release Notes Changelog Connector/J Overview
**Release date:** 15 Jun 2026
MariaDB Connector/J 3.5.9 is a [***Stable***](/docs/release-notes/community-server/about/release-criteria.md) ***(GA)*** release.
{% hint style="info" %}
**For an overview of MariaDB Connector/J see the** [**About MariaDB Connector/J**](/docs/connectors/mariadb-connector-j/about-mariadb-connector-j.md) **page**
{% endhint %}
## Key Enhancements
* [CONJ-1223](https://jira.mariadb.org/browse/CONJ-1223) - Cache TLS trust/key managers across connections to reduce SSL connection cost
* [CONJ-1314](https://jira.mariadb.org/browse/CONJ-1314) - Add SPI for interactive dialog (PAM) authentication callback
* [CONJ-1311](https://jira.mariadb.org/browse/CONJ-1311) - Add dedicated option `useIpForKillQuery` for query cancellation
* [CONJ-1310](https://jira.mariadb.org/browse/CONJ-1310) - Add full native-image (GraalVM) support and CI coverage
## Bugs Fixed
* [CONJ-1320](https://jira.mariadb.org/browse/CONJ-1320) - PAM (dialog) authentication must require a secure connection (TLS or unix socket), like `mysql_clear_password` (report by fg0x0)
* [CONJ-1319](https://jira.mariadb.org/browse/CONJ-1319) - Use constant-time comparison when validating the server certificate fingerprint (report by jmestwa-coder)
* [CONJ-1318](https://jira.mariadb.org/browse/CONJ-1318) - Enforce `allowLocalInfile=false` on the server's local-infile request, so a malicious server cannot read a client file despite the option being disabled (report by tharavel)
* [CONJ-1322](https://jira.mariadb.org/browse/CONJ-1322) - Match `LOAD LOCAL INFILE` filename case-sensitively (thanks to jmestwa-coder)
* [CONJ-1323](https://jira.mariadb.org/browse/CONJ-1323) - `LOAD LOCAL INFILE` validation rejects statements preceded by line comments (thanks to sebdomdev)
* [CONJ-1324](https://jira.mariadb.org/browse/CONJ-1324) - Fix SQL parser to correctly handle `--` in expressions and reset `lastChar` after block comments
* [CONJ-1315](https://jira.mariadb.org/browse/CONJ-1315) - Cap `BigDecimal`/`BigInteger` string parsing length to prevent CPU exhaustion in case of a man-in-the-middle (report by tonghuaroot)
* [CONJ-1317](https://jira.mariadb.org/browse/CONJ-1317) - Ensure a non-UTF-8 character set cannot be used for protocol exchanges (report by fg0x0)
* [CONJ-1316](https://jira.mariadb.org/browse/CONJ-1316) - Pin `Locale.ROOT` on locale-sensitive call sites and date/time/Duration text formatting (fixes locale-dependent parsing/formatting, e.g. under `tr_TR`) (thanks to jmestwa-coder)
* [CONJ-1304](https://jira.mariadb.org/browse/CONJ-1304) - Read `CallableStatement` parameter metadata from `mysql.proc`, with MySQL `information_schema` fallback
* [CONJ-1299](https://jira.mariadb.org/browse/CONJ-1299) - Keep `VALUES` literals after the last placeholder when rewriting batches
* [CONJ-1313](https://jira.mariadb.org/browse/CONJ-1313) - Race condition in `HaMode#getAvailableHostInOrder` can cause a `NullPointerException`
* [CONJ-1311](https://jira.mariadb.org/browse/CONJ-1311) - `Connection.cancelCurrentQuery` fails with `SslMode.VERIFY_FULL` when the client socket IP is set
* [CONJ-1264](https://jira.mariadb.org/browse/CONJ-1264) - Handle `LocalDateTime` as a zoneless wall-clock value
## Changelog
For a complete list of changes made in MariaDB Connector/J 3.5.9, with links to detailed\
information on each push, see the [changelog](/docs/release-notes/connectors/java/changelogs/3.5/3.5.9.md).
*This page is: Copyright © 2025 MariaDB. All rights reserved.*
{% @marketo/form formid="4316" formId="4316" %}