[debian-mysql] Bug#1129955: trixie-pu: package mariadb 1:11.8.6-0+deb13u1

[Otto Kekäläinen]

Package: release.debian.org
Affects: src:mariadb
Severity: normal
Tags: trixie
User: release.debian.org at packages.debian.org
Usertags: pu
X-Debbugs-Cc: mariadb at packages.debian.org

I propose that the latest minor maintenance version of MariaDB to be included in
the stable release update of Debian.

## Debdiff

A source debdiff is attached, which was created with commands:
git diff --stat debian/1%11.8.3-0+deb13u1..debian/13-trixie | xz -19 >
debian-1%11.8.6-0+deb13u1.debdiff.stat.xz
git diff debian/1%11.8.3-0+deb13u1..debian/13-trixie | xz -19 >
debian-1%11.8.6-0+deb13u1.debdiff.xz

Due to the size of the attachments I recommend checking out the
package in git for review instead.

## Changelog

mariadb (1:11.8.6-0+deb13u1) trixie; urgency=medium

  [ Otto Kekäläinen ]
  * New upstream maintenance release 11.8.6. For details about fixes please see
    https://mariadb.com/docs/release-notes/community-server/11.8/11.8.6
  * For details about fixes in 11.8.5 please see
    https://mariadb.com/docs/release-notes/community-server/11.8/11.8.5
    and the security notices:
    - CVE-2025-13699
    - CVE-2026-21968
  * For details about fixes in 11.8.4 please see
    https://mariadb.com/docs/release-notes/community-server/11.8/11.8.4
  * The version 11.8.4 was skipped in Debian (and Ubuntu) as it has a severe
    regression causing partial data deletion when using the DELETE statement on
    MyISAM or Aria tables under specific conditions (MDEV-38068)
  * Already existing plugins marked ready for general availability by upstream
    in this release: uuid_v4, uuid_v7 and inet4
  * Upstream 11.8.5 included fix to MDEV-36556 about upgrades failing from 10.4
    when encryption enabled (Closes: #1122811)
  * Add debian/source/local-options to suppress WolfSSL line ending errors
  * Patch new upstream test main.alter_merge to allow 'from Debian'
  * Fix path to mariadb-server.README in mariadb-secure-install
    (Closes: #1127863)
  * Add preliminary upstream patch to fix MDEV-38811 that affected Akonadi and
    any other use case that relies on 'skip-grant-tables' (Closes: #1127431)
  * Update patch statuses and Forwarded fields to aid patch maintenance in
    future new upstream version updates
  * Update server trace to include new 'new-mode' value 'FIX_INDEX_LOOKUP_COST'
  * Salsa CI: Apply several fixes already in use on debian/latest branch and
    which are needed on this branch as well due to external changes since
    August 2026, most notably Salsa CI switching to be sbuild based

  [ Daniel Black ]
  * MDEV-37411: Re-enable AIO in Debian to fix earlier incomplete fix that was
    done after new upstream 11.8.3 release introduced innodb_linux_aio
  * MDEV-15502: With recent changes in upstream systemd, the tmpfiles are now
    required, otherwise starting MariaDB would fail on error:
    "cannot create /run/mysqld/wsrep-start-position: Directory nonexistent"

## Quality control

All changes have been reviewed by several people in the Merge Request
at https://salsa.debian.org/mariadb-team/mariadb-server/-/merge_requests/156

Extensive CI is passing.

This version has been in Debian unstable, testing respective Ubuntu
release for several weeks without regressions.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: debian-1%11.8.6-0+deb13u1.debdiff.stat.xz
Type: application/x-xz
Size: 32164 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-mysql-maint/attachments/20260306/827af01f/attachment-0002.xz>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: debian-1%11.8.6-0+deb13u1.debdiff.xz
Type: application/x-xz
Size: 3102288 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-mysql-maint/attachments/20260306/827af01f/attachment-0003.xz>