Changes in MySQL Connector/C++ 8.4.0 (2024-04-30, General Availability)

• Security Notes

• Functionality Added or Changed

• Bugs Fixed

Security Notes

• For platforms on which OpenSSL libraries are bundled, the linked OpenSSL library for Connector/C++ has been updated to version 3.0.13. Issues fixed in OpenSSL version 3.0.13 are described at https://openssl-library.org/news/openssl-3.0-notes/. . (Bug #36278302)

Functionality Added or Changed

• Expanded the Windows file attributes for packaged executable and DLL files. (WL #16156)

• Removed support for the deprecated authentication_fido authentication plugin. Instead, use authentication_webauthn. For backward-compatibility, the Fido_Callback callback argument remains but invokes WebAuthn authentication. (WL #16154)

• Setting query attributes for executed queries now supports prepared statements. (WL #15968)

• Known limitation of this release: because the mysql_native_password authentication plugin is disabled by default as of MySQL Server 8.4.0, some unit tests may generate errors unless the plugin is enabled.

Bugs Fixed

• A failed connection from an unreachable host would always reference "localhost" in the error message, but now shows the configured host name and port number. (Bug #36383472)

• Building JDBC Connector/C++ from the source in combination with an older version of the MySQL client library that supports reconnect functionality (MySQL 8.3.0 and earlier) now allows OPT_RECONNECT to function. Otherwise, the option is ignored.

  Note that MySQL Server 8.4.0 removes reconnect functionality, but to preserve backward compatibility this connector can still set OPT_RECONNECT and read its value as before but it has no effect on connection behavior with MySQL Server 8.4.0. (Bug #36316146)

• On Windows using Visual Studio 2022, the connector would not build with the -DBUILD_STATIC=1 configuration option. (Bug #36250741)

• The build system now uses CMake's FindOpenSSL rather than a custom FindSSL module to better function with LibreSSL, and to better handle upcoming OpenSSL versions. The custom FindSSL module is still utilized with CMake 3.8 and earlier. This fix is based on a patch from Sam James, thank you for the contribution. (Bug #110784, Bug #35584977)