Oracle has launched a new branch of the MySQL DBMS, version 9.4.0. MySQL Community Server 9.4.0 builds are available for all major Linux distributions, FreeBSD, macOS, and Windows. In accordance with the release model implemented in 2023, MySQL 9.4 is designated as an 'Innovation' branch. Innovation branches are recommended for those who want early access to new features, are published every three months, and are supported only until the next significant release is published (for example, support for version 9.3 will cease after version 9.4 is released). An LTS release 9.5 is planned for the fall, recommended for implementations that require predictability and long-term maintenance of consistent behavior. Following the LTS branch, a new Innovation branch will be created — MySQL 10.0.
Key changes in MySQL 9.4:
- Support for the BIT type has been implemented in stored procedures written in JavaScript. Values with the BIT type less than or equal to JavaScript.MAX_SAFE_INTEGER are converted to the JavaScript Number type, while larger values are converted to the JavaScript BigInt type.
- The mysql command-line utility has added the '--commands' option, which enables support for executing local commands (commands are disabled by default):
- charset
- clear
- connect
- edit
- ego
- sigreturn
- go
- help
- nopager
- notee
- nowarning
- pager
- prompt
- query_attributes
- quit
- rehash
- resetconnection
- ssl_session_data_print
- source
- status
- system
- tee
- \u
- warnings
- The firewall plugin, which allowed filtering SQL queries to the DBMS based on specified patterns, has been replaced by the MySQL Enterprise Firewall component, which implements identical functionality except for support for account profiles (instead, group profiles are supported). The firewall plugin is deprecated and will be removed in one of the upcoming releases. MySQL Enterprise Firewall is available only to users of the commercial MySQL Enterprise Edition.
- Thirty vulnerabilities have been fixed, one of which may be remotely exploited with access to send requests to the DBMS. The four most serious issues have a severity level of 6.5 and are associated with vulnerabilities in DML and the optimizer. Less severe vulnerabilities affect InnoDB, the optimizer, stored procedures, LDAP Auth, and the replication system.
Source: opennet.ru
