[debian-mysql] MariaDB 10.0.15 update, fixes multiple CVEs

Arnaud Fontaine arnau at debian.org
Wed Nov 26 08:34:35 UTC 2014


Hello,

Otto Kekäläinen <otto at seravo.fi> writes:

> MariaDB 10.0.15 was just released and it includes security fixes:
> https://mariadb.com/kb/en/mariadb/development/release-notes/mariadb-10015-release-notes/
>
> I've now imported the new upstream, updated patches, built it
> successfully on my laptop etc and pushed to
> http://anonscm.debian.org/cgit/pkg-mysql/mariadb-10.0.git/
>
> I will now run my "build array" that pushes the results to
> http://labs.seravo.fi/~otto/mariadb-repo/
>
> Security team: if my build array does not show any errors (it will run
> the ~4000 tests test suite etc) the package will be upload ready by
> tomorrow morning, but I am not sure when I will have time to continue
> with this, maybe not until the weekend. If you feel it is urgent, I
> don't mind if you do an upload.
>
> Packaging team: if you want to help out and e.g. close one ot the
> three open bugs on src:mariadb-10.0, now would be a good time, so they
> will ship with this upload in the coming days.

I was  just having  a look  at #767903  and it  seems the  maintainer of
libpcre3 fixed the  issue but uploaded a new upstream  release, which is
unlikely to be unblocked because of the freeze policy, so let's wait for
this issue to be sorted out before updating the Build-Depends and upload
MariaDB to fix this RC bug... 

Cheers,
-- 
Arnaud Fontaine
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 818 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/attachments/20141126/26370e59/attachment-0001.sig>


More information about the pkg-mysql-maint mailing list