[arch-general] mariadb package outdate for over a month

[Florijan Hamzic]

@Christian you are absolutely right, i also do not feel very comfortable
using the mariadb from AUR and would be glad to see if we can find a
solution for the drop-in/zerofill problem

i tried to find anything about the problem, does somebody know what the
statement of mariadb is?

Best regards

Am Di., 18. Dez. 2018 um 23:47 Uhr schrieb Genes Lists via arch-general <
arch-general at archlinux.org>:

> On 12/18/18 3:54 PM, Christian Hesse wrote:
> >
> > The remaining issue is that zerofill support in libmariadb is broken.
> >
>
>
> Thanks Christian:
>
>    I certainly assume you're all making sound decisions on holding off
> on 10.3.11 - but it would be helpful, if you you wouldn't mind, sharing
> a little more info about that.
>
>    Are we waiting for fixes to client apps (which ones) or further fixes
> to mariadb server or mariadb client lib or something else? Sounds like
> the client library from above?
>
>   What client apps are affected and how badly - i.e. what would break if
> we did update.
>
>   I do note that there are a lot of security fixes in the newer mariadb
> [1] (12 CVEs alone in 10.3.11).
>
>   I also note that fedora has included 10.3 and marked it as a security
> update [2] (or at least its in Bodhi)- does that mean fedora doesn't
> support those client apps that prevent updates like we do?
>
>    Debian seems also seems to not ship 10.3 as far as I can tell and
> neither does ubuntu nor Opensuse (not sure about tumbleweed). So we're
> clearly not alone here.
>
>   Thanks for your work keeping Arch the best!!
>
> regards
>
> gene
>
>
>
> [1] https://mariadb.com/kb/en/library/mariadb-10311-release-notes/
> [2] https://bodhi.fedoraproject.org/updates/?packages=mariadb&page=1
>