[debian-mysql] Bug#775882: Bug#775882: mariadb-10.0: affected by CVEs of the Oracle Patch Update for January 2015?

[Salvatore Bonaccorso]

Hi Otto,

On Tue, Jan 27, 2015 at 09:20:51PM +0200, Otto Kekäläinen wrote:
> 2015-01-27 8:09 GMT+02:00 Salvatore Bonaccorso <carnil at debian.org>:
> > Thanks for the update and checking with upstream regarding the two
> > other CVEs. 10.0.16 seems now avaiable[1] (even though not yet
> > announced on the webpage itself).
> >
> >  [1]  https://downloads.mariadb.com/files/MariaDB/mariadb-10.0.16/source
> 
> 
> 10.0.16 has now been officially announced and I've updated both the
> master and jessie branches of the Debian packaging repo:
> http://anonscm.debian.org/cgit/pkg-mysql/mariadb-10.0.git/
> 
> Local builds pass OK. Currently I am running with the full test suite
> etc and if they pass I'll upload master to experimental, and if it is
> fully OK, I'll update jessie branch to unstable. As Jessie is not
> released, there is no jessie-security upload target yet, right?

Yes right, so release team needs to ack it and give an unblock for it.
I hope this will be not problem, so that we can have alreayd
mariadb-10.0/10.0.16-1 in jessie.

Thanks for your work and keeping us up-to-date,

Regards,
Salvatore