Connector/J 3.4.4 Changelog

Full changelog for MariaDB Connector/J 3.4.4, listing every commit in the release.

The most recent release of MariaDB Connector/J is: 3.5.10

Download Connector/J 3.5.10

Download Release Notes Changelog Connector/J Overview

Release date: 29 Jul 2026

For the highlights of this release, see the release notes.

The revision number links will take you to the revision's page on GitHub. On GitHub you can view more details of the revision and view diffs of the code modified in that revision.

• Revision #e51999994 - bump 3.4.4 version

• Revision #76d8f8d14 - [misc] bump jacoco version

• Revision #d7ee56c2a - [CONJ-1340] ensuring having database set when using updatable results

• Revision #e9bbf6867 - [CONJ-1342] cherry pick follow up

• Revision #f8600bfb9 - [CONJ-1342] socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is attacker-controlled

• Revision #b21e7f6ba - [CONJ-1341] MariaDbPoolDataSource.getConnection(user, password) ignores the user argument when the pool's own password is supplied

• Revision #8767550db - cap length-encoded field length before narrowing to int in row decoders

• Revision #dc43a5d1c - [CONJ-1340] escape identifiers in updatable result set generated sql

• Revision #e64141ffc - [CONJ-1339] Add maxAllowedColumns option to bound server-announced column count

• Revision #7c848146a - [CONJ-1332] Reject multipart (>16 MB) packets before authentication

• Revision #343e453a5 - [CONJ-1329] refuse local infile request when parameter value unavailable

• Revision #2f2ad71c1 - match restrictedAuth plugin list exactly

• Revision #4f5c64a2c - mask password in redirect url before logging

• Revision #ad87cb140 - [CONJ-1326] Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral()

_{This page is: Copyright © 2026 MariaDB. All rights reserved.}