[debian-mysql] MariaDB 10.0.15 update, fixes multiple CVEs

Arnaud Fontaine arnau at debian.org
Mon Dec 8 04:30:00 UTC 2014


Hello,

Sorry for the lag.

> I've been  waiting for  a thumbs  up from you  and I  haven't uploaded
> 10.0.15 yet. How long do you think  we should wait for libpcre3 to get
> fixed?

I  received an  email from  Ivo  De Decker  that  it has  been fixed  in
libpcre3  2:8.35-3.2 and  the  Release Team  has  already unblocked  the
package. Ivo also uploaded a binNMU  for MariaDB. I have just bumped the
Build-Depends against pcre3 as well.

> Is there  any other issues somebody  wants to fix in  MariaDB before I
> upload 10.0.15?

Before uploading  10.0.15 and  considering that this  is a  new upstream
release,  I think  it would  be better  to file  a pre-approval  unblock
request to the Release Team to ensure that it will be accepted later on.

Cheers,
-- 
Arnaud Fontaine
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 818 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/attachments/20141208/cf00dfe9/attachment.sig>


More information about the pkg-mysql-maint mailing list