OneDB v2.8.2

Release Date: June 2026
Release Type: Maintenance Release
Branch: 2.8.2

Enhancements

Improved Oracle Listener Result-Set Masking

OneDB v2.8.2 improves Oracle Listener masking reliability for complex result-set response flows.

The Oracle Listener can now handle protected values that are split across backend response packets. This helps ensure sensitive values remain protected even when result-set data is delivered through continuation or fetch packets.

The update also improves strict response-column policy handling. OneDB continues to apply masking only to fields matched by the active Field Settings policy, reducing the risk of applying protection to an unintended column.

Stronger Oracle Result-Set Detection

Oracle response processing has been enhanced to better distinguish result-set metadata from actual result rows.

This prevents ordinary response values, such as transaction statuses, merchant names, currency values, or other row content, from being incorrectly interpreted as response-column metadata. The active protection policy remains consistent throughout the result-set response flow.

Expanded Payment Card Validation

Oracle Listener masking now supports standard payment card values from 13 to 19 digits, including 15-digit card numbers.

This improves the reliability of CREDIT_CARD protection policies for supported card formats.

Safer Strict Masking Behavior

Strict Oracle result-set masking now uses metadata and response-column mapping as its primary decision source.

When a response frame cannot be validated safely, OneDB avoids applying uncertain masking rather than risking protection of the wrong column. This strengthens predictable policy enforcement for Oracle result sets.

Bug Fixes

  • Fixed Oracle Listener masking when protected text values are split across multiple backend response packets.
  • Fixed cases where continuation or fetch packets could lose the active result-set protection context.
  • Fixed cases where Oracle row values could be incorrectly interpreted as descriptor metadata, causing the active response-column map to be replaced.
  • Fixed masking coverage for final Oracle result rows that do not follow the usual packet marker pattern.
  • Fixed support for 15-digit payment card values in Oracle CREDIT_CARD protection policies.
  • Fixed false row detection caused by packet bytes that may also appear within Oracle date, timestamp, or field-length payloads.

Security Updates

  • Improved strict Oracle masking accuracy by applying protection only to fields mapped by the active Field Settings policy.
  • Reduced the risk of unintended masking by avoiding value-pattern or semantic guessing in strict Oracle result-set processing.
  • Improved diagnostic visibility for Oracle continuation handling without logging raw protected or detokenized values.

Known Notes

  • This release focuses on Oracle Listener result-set response handling.
  • Oracle Listener diagnostics remain intended for controlled troubleshooting and support analysis.
  • Administrators should validate masking policies against representative application queries after upgrading, particularly for applications that return large result sets or use fetch/continuation response flows.