3.4.3 (Jun 2026)
Bugs Fixed
- CONJ-1315 cap BigDecimal/BigInteger string parsing length to prevent CPU exhaustion if Mitm (report by tonghuaroot)
- CONJ-1316 pin Locale.ROOT on locale-sensitive call sites and date/time/Duration text formatting (fixes
locale-dependent parsing/formatting, e.g. under tr_TR) (thanks to jmestwa-coder) - CONJ-1259 DatabaseMetaData read-only detection: handle MariaDB 12.0
@@read_onlyreturningON/OFF
instead of1/0 - CONJ-1317 ensure non-UTF8 charset cannot be used for protocol exchanges (report by fg0x0)
- CONJ-1320 PAM (dialog) authentication now requires a secure connection (TLS or unix socket), like mysql_clear_password (report by fg0x0)
- CONJ-1319 use constant-time comparison when validating the server certificate fingerprint (thanks to jmestwa-coder)
- CONJ-1322 match local infile filename case-sensitively (thanks to jmestwa-coder)
- CONJ-1323 LOAD LOCAL INFILE validation rejects statements preceded by line comments (thanks to sebdomdev)