Bug#1000342: bullseye-pu: package mariadb-10.5 10.5.13-0+deb11u1
Hi,
On Mon, 2021-12-06 at 11:39 -0800, Otto Kekäläinen wrote:
> MariaDB 10.6.5 has been uploaded to Sid and will replace 10.5 as soon
> as it has the initial bugs weeded out and is same or better overall
> quality as 10.5.
I saw the 10.6 uploads, but I'm afraid that doesn't directly address
the concern.
With 10.5 still being the default in unstable, if we only release
10.5.13 via the point release then users of Debian's default
MySQL/MariaDB package in unstable and testing do not benefit from the
updates included in it, including the fixes for CVE-2021-35604.
When we were faced with a similar situation for 10.3 last year, we
decided to proceed anyway as 10.5 was about to become the default
version and 10.3 was then removed from unstable shortly afterwards.
Looking at the current status of the 10.6 packages in unstable, it
doesn't seem like we're in the same situation - there are build
failures on multiple architectures, for instance, and no packages in
testing yet. As such, I'm trying to gauge the likely timescales
involved, so that we can make the best decision for our users.
Regards,
Adam
Reply to: