[arch-general] mariadb package outdate for over a month
Hey fellow Arch users, the extra/mariadb package is flagged as out of date since 2018-11-09. I was wondering, why it still was not updated. There is already an AUR package, which provides a newer version. Is there any information on why the package is still out of date? Kind regards, Sefa Eyeoglu https://scrumplex.net
On 12/18/18 2:31 PM, Sefa Eyeoglu via arch-general wrote:
Hey fellow Arch users,
the extra/mariadb package is flagged as out of date since 2018-11-09. I was wondering, why it still was not updated. There is already an AUR package, which provides a newer version. Is there any information on why the package is still out of date?
Kind regards, Sefa Eyeoglu https://scrumplex.net
https://lists.archlinux.org/pipermail/arch-general/2017-September/044255.htm... -- Eli Schwartz Bug Wrangler and Trusted User
a working 10.3 exist in AUR and so far it workes very well in my environment https://aur.archlinux.org/packages/mariadb-10.3 Am Di., 18. Dez. 2018 um 20:56 Uhr schrieb Eli Schwartz via arch-general < arch-general@archlinux.org>:
Hey fellow Arch users,
the extra/mariadb package is flagged as out of date since 2018-11-09. I was wondering, why it still was not updated. There is already an AUR package, which provides a newer version. Is there any information on why the
On 12/18/18 2:31 PM, Sefa Eyeoglu via arch-general wrote: package
is still out of date?
Kind regards, Sefa Eyeoglu https://scrumplex.net
https://lists.archlinux.org/pipermail/arch-general/2017-September/044255.htm...
-- Eli Schwartz Bug Wrangler and Trusted User
Florijan Hamzic via arch-general
a working 10.3 exist in AUR and so far it workes very well in my environment https://aur.archlinux.org/packages/mariadb-10.3
The remaining issue is that zerofill support in libmariadb is broken. -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Best regards my address: */=0;b=c[a++];) putchar(b-1/(/* Chris cc -ox -xc - && ./x */b/42*2-3)*42);}
On 12/18/18 3:54 PM, Christian Hesse wrote:
The remaining issue is that zerofill support in libmariadb is broken.
Thanks Christian: I certainly assume you're all making sound decisions on holding off on 10.3.11 - but it would be helpful, if you you wouldn't mind, sharing a little more info about that. Are we waiting for fixes to client apps (which ones) or further fixes to mariadb server or mariadb client lib or something else? Sounds like the client library from above? What client apps are affected and how badly - i.e. what would break if we did update. I do note that there are a lot of security fixes in the newer mariadb [1] (12 CVEs alone in 10.3.11). I also note that fedora has included 10.3 and marked it as a security update [2] (or at least its in Bodhi)- does that mean fedora doesn't support those client apps that prevent updates like we do? Debian seems also seems to not ship 10.3 as far as I can tell and neither does ubuntu nor Opensuse (not sure about tumbleweed). So we're clearly not alone here. Thanks for your work keeping Arch the best!! regards gene [1] https://mariadb.com/kb/en/library/mariadb-10311-release-notes/ [2] https://bodhi.fedoraproject.org/updates/?packages=mariadb&page=1
@Christian you are absolutely right, i also do not feel very comfortable using the mariadb from AUR and would be glad to see if we can find a solution for the drop-in/zerofill problem i tried to find anything about the problem, does somebody know what the statement of mariadb is? Best regards Am Di., 18. Dez. 2018 um 23:47 Uhr schrieb Genes Lists via arch-general < arch-general@archlinux.org>:
On 12/18/18 3:54 PM, Christian Hesse wrote:
The remaining issue is that zerofill support in libmariadb is broken.
Thanks Christian:
I certainly assume you're all making sound decisions on holding off on 10.3.11 - but it would be helpful, if you you wouldn't mind, sharing a little more info about that.
Are we waiting for fixes to client apps (which ones) or further fixes to mariadb server or mariadb client lib or something else? Sounds like the client library from above?
What client apps are affected and how badly - i.e. what would break if we did update.
I do note that there are a lot of security fixes in the newer mariadb [1] (12 CVEs alone in 10.3.11).
I also note that fedora has included 10.3 and marked it as a security update [2] (or at least its in Bodhi)- does that mean fedora doesn't support those client apps that prevent updates like we do?
Debian seems also seems to not ship 10.3 as far as I can tell and neither does ubuntu nor Opensuse (not sure about tumbleweed). So we're clearly not alone here.
Thanks for your work keeping Arch the best!!
regards
gene
[1] https://mariadb.com/kb/en/library/mariadb-10311-release-notes/ [2] https://bodhi.fedoraproject.org/updates/?packages=mariadb&page=1
participants (5)
-
Christian Hesse
-
Eli Schwartz
-
Florijan Hamzic
-
Genes Lists
-
Sefa Eyeoglu