[arch-general] mariadb package outdate for over a month

[Genes Lists]

On 12/18/18 3:54 PM, Christian Hesse wrote:
> 
> The remaining issue is that zerofill support in libmariadb is broken.
> 


Thanks Christian:

   I certainly assume you're all making sound decisions on holding off 
on 10.3.11 - but it would be helpful, if you you wouldn't mind, sharing 
a little more info about that.

   Are we waiting for fixes to client apps (which ones) or further fixes 
to mariadb server or mariadb client lib or something else? Sounds like 
the client library from above?

  What client apps are affected and how badly - i.e. what would break if 
we did update.

  I do note that there are a lot of security fixes in the newer mariadb 
[1] (12 CVEs alone in 10.3.11).

  I also note that fedora has included 10.3 and marked it as a security 
update [2] (or at least its in Bodhi)- does that mean fedora doesn't 
support those client apps that prevent updates like we do?

   Debian seems also seems to not ship 10.3 as far as I can tell and 
neither does ubuntu nor Opensuse (not sure about tumbleweed). So we're 
clearly not alone here.

  Thanks for your work keeping Arch the best!!

regards

gene



[1] https://mariadb.com/kb/en/library/mariadb-10311-release-notes/
[2] https://bodhi.fedoraproject.org/updates/?packages=mariadb&page=1