[debian-mysql] Bug#1099515: mariadb-server: Error with INSERT SELECT on NOT NULL columns while having BEFORE UPDATE trigger

[Patrick Braun]

Package: mariadb-server
Version: 1:10.5.28-0+deb11u1
Severity: normal
X-Debbugs-Cc: team at security.debian.org

The security update to version 10.5.28 (and likely other versions too) caused a bug by upstream commit
https://github.com/MariaDB/server/commit/a69da0c31e97109bba099022acdd393f92fa127f

MariaDB upstream introducted the bug in their fix for https://jira.mariadb.org/browse/MDEV-19761
The bug causes INSERT SELECT on NOT NULL columns to error if triggers are defined
The bug is already fixed upstream in the commit 
https://github.com/MariaDB/server/commit/cd7513995dd67bf9376681c0986b8a5c484188c8
and documented in the ticket https://jira.mariadb.org/browse/MDEV-36026. Unfortunately the update
is merged but not tagged as a version/release yet.

I have rebuild mariadb-server with the fix-commit patched in,
the resulting package seems to work fine at first sight.

Please note the report had to be written on a debian 12 system. The problem definitely occurres on debian 11,
wether it also affects debian 12 is unknown to me.

-- System Information:
Debian Release: 12.9
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable'), (100, 'bookworm-fasttrack'), (100, 'bookworm-backports-staging')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-31-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages mariadb-server depends on:
ii  adduser                3.134
ii  debconf [debconf-2.0]  1.5.82
ii  galera-4               26.4.20-0+deb12u1
ii  gawk                   1:5.2.1-2
ii  iproute2               6.1.0-3
ii  libc6                  2.36-9+deb12u9
ii  libdbi-perl            1.643-4
ii  libpam0g               1.5.2-6+deb12u1
ii  libssl3                3.0.15-1~deb12u1
ii  libstdc++6             12.2.0-14
ii  lsof                   4.95.0-1
ii  mariadb-client         1:10.11.6-0+deb12u1
ii  mariadb-common         1:10.11.6-0+deb12u1
ii  mariadb-server-core    1:10.11.6-0+deb12u1
ii  passwd                 1:4.13+dfsg1-1+b1
ii  perl                   5.36.0-7+deb12u1
ii  procps                 2:4.0.2-3
ii  psmisc                 23.6-1
ii  rsync                  3.2.7-1+deb12u2
ii  socat                  1.7.4.4-2
ii  zlib1g                 1:1.2.13.dfsg-1

Versions of packages mariadb-server recommends:
ii  libhtml-template-perl           2.97-2
ii  mariadb-plugin-provider-bzip2   1:10.11.6-0+deb12u1
ii  mariadb-plugin-provider-lz4     1:10.11.6-0+deb12u1
ii  mariadb-plugin-provider-lzma    1:10.11.6-0+deb12u1
ii  mariadb-plugin-provider-lzo     1:10.11.6-0+deb12u1
ii  mariadb-plugin-provider-snappy  1:10.11.6-0+deb12u1
ii  pv                              1.6.20-1

Versions of packages mariadb-server suggests:
ii  bsd-mailx [mailx]  8.1.2-0.20220412cvs-1
pn  mariadb-test       <none>
pn  netcat-openbsd     <none>

-- debconf information excluded