[debian-mysql] Bug#914172: mariadb-server-10.1: mariadb-server sec-update (10.1.37-0+deb9u1) uninstalls default-mysql-server, mysql-server, mariadb-server-10.1 & mariadb-client-10.1

[Jeremy Davis]

Package: mariadb-server-10.1
Version: unsure exactly - prior to today's security update
Severity: grave
Justification: renders package unusable

Dear Maintainer,

Please excuse me setting the severity as grave. Under the circumstance it seems appropriate, but I'm
not 100% sure.

FYI TurnKey Linux is a Debian derivative which builds "software appliances" using mostly Debian packages,
many with upstream software pre-installed on top.

It has Debian (and TurnKey) security updates automatically installed daily via cron-apt.

As of the (automated) installation of today's MariaDB server security update (10.1.37-0+deb9u1)
all of our user's LAMP based appliances uninstalled mariadb-server (i.e. default-mysql-server,
mysql-server, mariadb-server-10.1 & mariadb-client-10.1) and thus most of web based software
stopped functioning.

The expected outcome was that the packages were simply updated to the latest security update and continued
functioning.

We're still not sure exactly what caused this, but would like to note the issue. Assitance in ensuring
that this sort of issue doesn't reoccur would also be welcomed.

It only appears to be an issue if security only updates are installed. A full upgrade does not cause the
same issue.

The resolution is to simply reinstall default-mysql-server (which depends on mariadb-server-10.1 &
mariadb-client-10.1 - mysql-server is an un-needed transitional package).

Please note that this report was created on a freshly launched WordPress appliance (based on LAMP)
with security updates installed on firstboot (and without the above menitoned fix applied).

Please ask if you need any further info.

Regards,
Jeremy

-- System Information:
Debian Release: 9.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-8-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=C (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C), LANGUAGE=en_US.UTF-8 (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages mariadb-server-10.1 depends on:
ii  adduser                   3.115
ii  debconf [debconf-2.0]     1.5.61
ii  galera-3                  25.3.19-2
ii  gawk                      1:4.1.4+dfsg-1
ii  init-system-helpers       1.48
ii  iproute2                  4.9.0-1+deb9u1
ii  libaio1                   0.3.110-3
ii  libc6                     2.24-11+deb9u3
ii  libdbi-perl               1.636-1+b1
ii  libpam0g                  1.1.8-3.6
ii  libstdc++6                6.3.0-18+deb9u1
ii  libsystemd0               232-25+deb9u4
ii  lsb-base                  9.20161125
ii  lsof                      4.89+dfsg-0.1
pn  mariadb-client-10.1       <none>
ii  mariadb-common            10.1.37-0+deb9u1
ii  mariadb-server-core-10.1  10.1.37-0+deb9u1
ii  passwd                    1:4.4-4.1
ii  perl                      5.24.1-3+deb9u4
ii  psmisc                    22.21-2.1+b2
ii  rsync                     3.1.2-1+deb9u1
ii  socat                     1.7.3.1-2+deb9u1
ii  zlib1g                    1:1.2.8.dfsg-5

Versions of packages mariadb-server-10.1 recommends:
pn  libhtml-template-perl  <none>

Versions of packages mariadb-server-10.1 suggests:
ii  bsd-mailx [mailx]  8.1.2-0.20160123cvs-4
pn  mariadb-test       <none>
pn  netcat-openbsd     <none>
pn  tinyca             <none>