Skip to content

New upstream version MariaDB 10.5.29 for Debian 11 "Bullseye"

Otto Kekäläinen requested to merge import/1%10.5.29-0+deb11u1 into bullseye

Commits:

± git log --first-parent --reverse --format='format:* %C(yellow)%h%C(reset) %s' origin/bullseye...

  • 91c728fe Update upstream source from tag 'upstream/10.5.29'
  • c9afd072 Update changelog and refresh patches after 10.5.29 import
  • 5a8ca61e When shutting down 'mariadbd', fallback to 'mysqld'
  • b2533838 Update changelog for 1:10.5.29-0+deb11u1 release

Changelog:

mariadb-10.5 (1:10.5.29-0+deb11u1) bullseye-security; urgency=medium

  * New upstream version 10.5.29. Includes fixes for several defects
    as noted at https://mariadb.com/kb/en/mariadb-10-5-29-release-notes/ as well
    the following security issues not yet available in Debian Bullseye:
    - CVE-2025-30722
    - CVE-2025-30693
  * Drop patches applies upstream in latest 10.5.29
  * New upstream also fixes regression in INSERT SELECT on NOT NULL columns
    while having BEFORE UPDATE trigger (Closes: #1099515) as well as
    some CAP_IPC_LOCK capability fixes (MDEV-36229)
  * Fix the MariaDB SysV init file to stop processes named 'mysqld' if there
    was no process with name 'mariadbd' as in some upgrade situations apt/dpkg
    may be using binaries from a new package but service files from an old
  * Note that this was likely the last upstream minor maintenance release in
    the MariaDB 10.5 series (https://mariadb.org/about/#maintenance-policy)
    and additional updates may be available only if a sponsor of the Debian LTS
    (https://wiki.debian.org/LTS/Funding) initiative requires it, or if a
    a MariaDB vendor (https://mariadb.org/about/#service-providers) provides
    extended support

Commits may be easier to browse with a local checkout and running git difftool --dir-diff origin/bullseye

Branches upstream and pristine-tar are mechanically dictated by git-buildpackage and there is nothing to review.

Launchpad.net builds cannot be used to test builds as a Bullseye equivalent isn't available on Launchpad.net.

To assess that this 10.5.29 update is complete, compare to the 10.6, 10.11 and 11.4 updates happening in parallel:

Note that https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=mariadb-10.5 does not show all MariaDB bugs. In reality there might be also 10.5 affecting bugs listed at https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=mariadb

Edited by Otto Kekäläinen

Merge request reports