[debian-mysql] MariaDB 10.1.39 security upload?

[Moritz Muehlenhoff]

On Sat, Jul 13, 2019 at 11:46:17AM +0300, Otto Kekäläinen wrote:
> Hello!
> 
> > ke 8. toukok. 2019 klo 21.01 Moritz Mühlenhoff (jmm at inutil.org) kirjoitti:
> > >
> > > On Fri, May 03, 2019 at 04:49:19PM +0300, Otto Kekäläinen wrote:
> > > > Hello!
> > > >
> > > > I've prepared 10.1.39 at
> > > > https://salsa.debian.org/mariadb-team/mariadb-10.1/commits/stretch
> > > >
> > > > Changelog in commit:
> > > > https://salsa.debian.org/mariadb-team/mariadb-10.1/commit/f0256238130cb7f3cdb3c711940a036673502566
> > > >
> > > > Do you want to have this in a security upload or wait for next stable release?
> > >
> > > We don't have any further information as they originate from MySQL/Oracle, right?
> > >
> > > Given at the CVSS scores they most probably don't warrant a stretch-security
> > > update, we can either postpone them until the next update round or ship via
> > > a point update.
> >
> > Stable update proposed in Bug#929257.
> 
> FYI 10.1.40 has been pending as a stable update since May 20th:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=929257
> 
> Now it should go into oldstable but I wonder if should just close this bug.
> 
> If the interest in security uploads is low, they I should probably not
> focus on preparing them quickly each time they are released but put my
> Debian efforts on something more valuable instead?

It's totally valuable, but with the Buster release there simply hasn't been a Stretch
point release since May 20 :-)

> PS. Hope to see you in Curtiba in a week!

Too far away, probably next year!

Cheers,
        Moritz