[debian-mysql] MariaDB 10.1.38 update pending

[Otto Kekäläinen]

Hello!

pe 22. helmik. 2019 klo 15.32 Moritz Muehlenhoff (jmm at inutil.org) kirjoitti:
> > In https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920933 Salvatore
> > considered those CVE's grave, so I think this should go in as a
> > security update to Stretch.
>
> The severity with which bugs are filed is unrelated to the decision of
> what to address in a DSA.
>
> I really don't understand why Mariadb cannot provide proper security bug
> information. Are those security fixes inherited from Oracle/MySQL in
> some way?

Yes, they are directly inherited from Oracle/MySQL.