[debian-mysql] Processing of mysql-5.6_5.6.34-1_source.changes

[Robie Basak]

Hi Dominic,

On Tue, Nov 08, 2016 at 04:45:09PM +0000, Dominic Hargreaves wrote:
> That upload is a result of the plan discussed at the thread
> starting at
> <http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/2016-October/009602.html> where I explained why I thought it was appropriate - in brief - to
> support a minimally-invasive security update to jessie-backports. But
> even though mysql-common was removed from that package, I overlooked
> the other non-versioned package names, and I'm sorry for that.

Ah. I had read that but didn't realise that by updating
jessie-backports, you had to upload through unstable. I thought it would
get there more directly somehow (I'm not familiar with the details for
backports).

> I think that the archive will reject those binary packages because of the
> lower version number, so the damage may not be too large?

I'm told this is the case, yes. So AFAICT the only harm is that a newer
source package for src:mysql-5.6 is published now, but since that will
be removed soon and I don't expect any other regular uploads for
mysql-5.6, I don't think it matters.

If we did want to upload another src:mysql-5.6, I think it would suffice
to just remove those other binary packages from debian/control.

> I was just in the process of preparing a sponsored upload of MySQL 5.7
> in response to Lars' request here:
> 
> http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/2016-November/009750.html
> 
> but it's probably better to wait and see what happens with the MySQL
> 5.6 upload before doing that. If the wrong versions of those shared
> packages do make it to the archive, they can be replaced by a subsequent
> upgrade of MySQL 5.7.

OK. Thank you for sponsoring these for us!

> Since you mentioned testing - my understanding is that mysql-5.7 won't
> enter testing either, so I don't think that this mishap affects the 
> release. But then again, there is no release team RC bug, which I
> thought there was, so maybe I'm wrong on that front too..

Presumably they'll do that at some point, as I believe that this is
their intention. There has been talk of a mass bug filing to switch
reverse depends to MariaDB, too.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mysql-maint/attachments/20161108/8d42529c/attachment.sig>