Commit graph

5 commits

Author SHA1 Message Date
Sebastian Kemper
a90561a90b mariadb: bump to major version 10.4
Highlights:

- Bump from 10.2.26 to 10.4.10
- auth_pam got replaced with never version, old one still available as
  auth_pam_v1
- semisync plugins were merged into the core
- Upstream now installs symlinks for binaries with mariadb prefix. To
  accommodate that this commit updates Package/mariadb/install/bin
  accordingly.
- Patches are updated with new ones from Debian and Arch (thanks!)
- libedit patch dropped because it's upstream now.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-11-17 15:48:25 +01:00
Sebastian Kemper
2955b355b6 mariadb: security bump to 10.2.26
New upstream release. Addresses:

  CVE-2019-2805
  CVE-2019-2740
  CVE-2019-2739
  CVE-2019-2737
  CVE-2019-2758

Package updates:

  - includes "THIRDPARTY" in PKG_LICENSE_FILES
  - drops client_ed25519 as a dynamic plugin and install it with the lib
    as per upstream decision
  - refreshes patches

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-08-01 21:46:23 +02:00
Sebastian Kemper
498ccc192c mariadb: bump to 10.2.24
From Release Notes:

  Security

    MDEV-18686 - Add option to PAM authentication plugin to allow case insensitive username matching
    bugfix - multi-update checked privileges on views incorrectly (commit 5057d4637525eadad438d25ee6a4870a4e6b384c)
    MDEV-19276 - during connect, write error log warning for ER_DBACCESS_DENIED_ERROR, if log_warnings > 1
    MDEV-17456 - Malicious SUPER user can possibly change audit log configuration without leaving traces.

    Fixes for the following security vulnerabilities:
        CVE-2019-2614
        CVE-2019-2627
        CVE-2019-2628

OpenWrt changes:

  - added PKG_CPE_ID
  - shortened default description to make "opkg info" output easier on the eyes
  - refreshed patches

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2019-05-10 22:27:07 +02:00
Sebastian Kemper
c903332493 mariadb: bump to 10.2.x release
Bump to 10.2.x release series which has support for OpenSSL 1.1.x.

- libmariadbclient was replaced by libmaria
- libmaria uses LGPL, hence license info updated
- upstream disabled xtradb engine, innodb is now default (cannot be
  built as plugin anymore)
- complex charsets are now all included (size increase), as otherwise
  compile fails
- patches adapted/refreshed

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-06-28 21:22:37 +02:00
Sebastian Kemper
1b73f267ea mariadb: new package
MariaDB is a drop-in replacement for MySQL. This commit adds a current
and stable version of MariaDB to the tree.

Quite a few ideas/patches were copied from Alpine Linux, Busybox Buildroot
and Debian.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
2018-04-28 14:41:30 +02:00