[debian-mysql] MySQL latest

Lars Tangvald lars.tangvald at oracle.com
Wed Apr 5 06:04:02 UTC 2017


Generally the security situation shouldn't be too different from current 
stable, as we already support the security team with updates to 5.5, and 
I think we've cleared away the barriers that caused some delays in 
uploading security updates to unstable, but the security team won't be 
involved. The upstream repository at repo.mysql.com will always have the 
latest versions available (5.6, 5.7 and 8.0), though note there are some 
packaging differences, most notably that upstream packages do not 
automatically run mysql_upgrade.

I realize using sid or third-party repositories isn't ideal from a 
sysadmin perspective, but as mentioned Debian 9 will unfortunately not 
have any native MySQL packages.

--
Lars

On 04/05/2017 12:57 AM, Clint Byrum wrote:
> Hello. The security and release teams decided that they do not want
> MySQL in the next stable release of Debian due to Oracle's security
> disclosure policies. So when the next stable release is cut, you can
> backport 5.7 from unstable, where Oracle and Canonical engineers are
> keeping it maintained (at which point you're on your own for security
> updates) or switch to MariaDB.
>
> Excerpts from Dr Paul Adamthwaite's message of 2017-04-04 18:18:52 -0400:
>> Might I ask you to tell me which is the "latest" version of MySQL server
>> that could or should be used? Debian packages show both mysql-server
>> (5.5.54-0+deb8u1) and mysql-server (5.7.17-1), the latter as "unstable."
>>
>> Your Debian "derivative" Ubuntu uses the latter (recommendation from
>> Oracle?), yet stable Debian appears to hesitate. 5.7 may be a little
>> stricter (I'm not sure whether all aspects are security related) but we
>> have found it to be more efficient (CPU cycles) if necessary upgrades to
>> older db's can be effected.
>>
>> My concern is that Mariadb may be the ineluctable alternative, and I am
>> reluctant to to even have to consider major changes to several hundred
>> servers.
>>
>> Thanks -- Paul
>>
> _______________________________________________
> pkg-mysql-maint mailing list
> pkg-mysql-maint at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-mysql-maint




More information about the pkg-mysql-maint mailing list