MariaDB Sicherheitsupdate 10.0.26

Das Open Source Datenbanksystem und Fork von MySQL, MariaDB, ist in der Version 10.0.26 erschienen. Diese Version behebt 4 kritische Sicherheitsprobleme und führt 8 größere Änderungen ein.

MariaDB 10.0.26 Änderungen

• XtraDB updated to 5.6.30-76.3
• Innodb updated to 5.6.31
• Performance Schema updated to 5.6.31
• PCRE library updated to 8.39
• TokuDB updated to 5.6.30-76.3
• HeidiSQL updated to 9.3
• Various bintar builds for POWER8 ppc64 and ppc64le architectures now available
• As per the MariaDB Deprecation Policy, this will be the last release of MariaDB 10.0 for Ubuntu 15.10 “wily”

MariaDB 10.0.26. Security

• CVE-2016-3477
• CVE-2016-3521
• CVE-2016-3615
• CVE-2016-5440

Releasenotes MariaDB 10.0.26: https://mariadb.com/kb/en/mariadb/mariadb-10026-release-notes/

Release date: 24 Jun 2016

For the highlights of this release, see the release notes.

The revision number links will take you to the revision’s page on Github. On Github you can view more details of the revision and view diffs of the code modified in that revision.

• Revision #9fc102b 2016-06-23 12:44:28 +0400
  • Fixed testcase check failure after db938.test
• Revision #f289f3e 2016-06-23 12:16:20 +0400
  • MDEV-9728 – Hard crash in metadata_lock_info
• Revision #4abeebe 2016-06-23 12:06:16 +0400
  • MDEV-9728 – Hard crash in metadata_lock_info
• Revision #26de906 2016-06-23 07:42:40 +0300
  • Merge Revision #ef92aaf from 5.5
• Revision #e167806 2016-06-22 15:31:58 +0200
  • compilation failures
• Revision #26bf066 2016-06-21 10:25:08 +1000
  • MDEV-9479: Enable OQGRAPH Engine to compile with Boost-1.60+
• Revision #b449612 2016-06-20 23:43:01 +0300
  • MDEV-8638: REVOKE ALL PRIVILEGES, GRANT OPTION FROM CURRENT_ROLE breaks replication
• Revision #5fd8087 2016-05-30 21:42:36 +0300
  • [MDEV-9614] Roles and Users longer than 6 characters
• Revision #f9b5acf 2016-06-22 10:54:19 +0200 – Merge branch ‘bb-10.0-serg’ into 10.0
• Revision #87da767 2016-06-22 09:41:06 +0200
  • Fixed for failures in buildbot: TokuDB
• Revision #a10fd65 2016-06-22 00:24:42 +0200
  • Fixed for failures in buildbot: Replication
• Revision #805703f 2016-06-22 00:20:28 +0200
  • Fixed for failures in buildbot: Windows
• Revision #b760a69 2016-06-21 16:44:03 +0200 – Merge branch ‘merge-pcre’ into 10.0
• Revision #1592fbd 2016-06-21 16:02:35 +0200
  • 8.39
• Revision #c84a40b 2016-06-21 15:57:20 +0200 – Merge branch ‘connect/10.0’ into 10.0
• Revision #f2dded9 2016-06-20 15:26:05 +0200 – Merge branch ‘10.0’ of https://github.com/MariaDB/server into 10.0
• Revision #0a96c9c 2016-06-13 14:28:02 +0200
  • Possibly fix MDEV-10179 Reset remote tables when re-opening
• Revision #a9ac350 2016-06-02 23:36:19 +0200
  • git90.msg + git91.msg
• Revision #e905abf 2016-05-23 15:17:43 +0200
  • New version of the java JdbcInterface
• Revision #9a5c586 2016-05-22 11:13:10 +0200 – Merge branch ‘10.0’ of https://github.com/MariaDB/server into 10.0
• Revision #da34a8c 2016-05-21 14:58:22 +0200 – Merge branch ‘ob-10.0’ into 10.0
• Revision #d25fd43 2016-05-21 14:56:47 +0200
  • Fix wrong return from ExecuteQuery
• Revision #c92f260 2016-05-21 12:11:27 +0200
  • Commit changes made from 10.1
• Revision #ab62154 2016-05-13 01:20:46 +0200 – Merge branch ‘ob-10.0’ into 10.0
• Revision #4a1ffc3 2016-05-12 23:26:40 +0200
  • Add forgotten changes made on 10.1
• Revision #5af076e 2016-05-12 23:08:22 +0200
  • Add all changes made on 10.1
• Revision #a69f4c7 2016-06-21 15:55:37 +0200 – Merge branch ‘bb-10.0-serg’ into 10.0
• Revision #61a880d 2016-06-21 15:47:55 +0200 – Merge branch ‘merge-perfschema-5.6’ into 10.0
• Revision #51ed64a 2016-06-21 14:22:52 +0200
  • 5.6.31
• Revision #72d2389 2016-04-26 19:06:20 +0200
  • 5.6.30
• Revision #b3f4cf7 2016-06-21 15:27:09 +0200 – Merge branch ‘merge-xtradb-5.6’ into 0.0
• Revision #b42664e 2016-06-21 14:20:09 +0200
  • 5.6.30-76.3
• Revision #a79d46c 2016-06-21 14:58:19 +0200 – Merge branch ‘merge-innodb-5.6’ into 10.0
• Revision #720e04f 2016-06-21 14:21:03 +0200
  • 5.6.31
• Revision #c081c97 2016-06-21 14:11:02 +0200 – Merge branch ‘5.5’ into bb-10.0
• Revision #a482e76 2016-06-20 16:12:54 +0200
  • fix a mysql-5.5.50 merge: mysqlcheck
• Revision #95bf696 2016-06-19 14:51:03 +0200
  • MDEV-9749 InnoDB receives ‘Bad file descriptor’ error, possibly related to feedback plugin
• Revision #7f38a07 2016-06-17 18:54:11 +0400
  • MDEV-10043 – main.events_restart fails sporadically in buildbot (crashes upon shutdown)
• Revision #128930c 2016-06-17 12:39:20 -0400
  • bump the VERSION
• Revision #7ff86b4 2016-06-17 14:59:17 +0300
  • MDEV-10247 TokuDB assertion error when building with DEBUG
• Revision #1d21b22 2016-06-15 13:53:19 +0200
  • MDEV-10001 my_b_seek() may not work correctly after my_b_read() hits EOF
• Revision #ecdf46d 2016-06-11 22:56:48 +0200 – Merge branch ‘10.0-tokudb-merge’ into 10.0
• Revision #22d7860 2016-06-11 22:47:30 +0200
  • fix tokudb tests after the merge
• Revision #dde558f 2016-06-11 01:06:09 +0200 – Merge branch ‘merge-tokudb-5.6’ into 10.0-tokudb-merge
• Revision #f853a99 2016-06-10 19:47:58 +0200
  • 5.6.30-76.3
• Revision #30d9d4e 2016-04-26 20:58:29 +0200
  • 5.6.29-76.2
• Revision #ca95cc6 2016-06-10 20:48:59 +0200 – Merge branch ‘merge-tokudb-5.6’ into 10.0-tokudb-merge
• Revision #9a957a5 2016-04-26 20:56:25 +0200
  • move mysql-test into storage/tokudb, rename suites
• Revision #ae6cc54 2016-02-16 19:44:10 +0100
  • 5.6.28-76.1
• Revision #dcc501a 2015-12-15 17:23:58 +0100
  • 5.6.27-76.0
• Revision #02043d7 2016-05-09 18:38:16 +0200
  • MDEV-9128 Compiling on IBM System Z fails
• Revision #25f1a7a 2016-06-22 10:23:11 +0200
  • revert part of 69f1a32
• Revision #1f761c5 2016-06-21 23:34:31 +0400
  • MDEV-9728 – Hard crash in metadata_lock_info
• Revision #21479a6 2016-06-21 21:26:31 +0400
  • MDEV-9524 Cannot load from mysql.event when sql_mode is set to PAD_CHAR_TO_FULL_LENGTH The patch fixes the problem with loading information from system tables (e.g. event and help related tables) when PAD_CHAR_TO_FULL_LENGTH is enabled, as well as includes some additional minor improvements: – refactoring in get_field() to return an error rather than success if strmake_root() failed – removing of duplicate code in similar functions: char *get_field(MEM_ROOT *mem, Field *field) bool get_field(MEM_ROOT *mem, Field *field, String *res)
• Revision #69f1a32 2016-06-21 19:20:11 +0200
  • Replace dynamic loading of mysqld.exe data for plugins, replace with MYSQL_PLUGIN_IMPORT
• Revision #911af69 2016-06-20 14:35:58 +0200
  • MDEV-5973: MySQL Bug#11757486:49539: NON-DESCRIPTIVE ERR (ERROR 0 FROM STORAGE ENGINE) WITH MULTI-TABLE UPDATE
• Revision #8255781 2016-06-20 13:54:19 +0400
  • MDEV-10258 – Valgrind warnings in buildbot after a set of mroonga tests
• Revision #82a9692 2016-06-15 13:57:44 +0400
  • MDEV-9728 – Hard crash in metadata_lock_info
• Revision #1531321 2016-04-26 13:42:10 +0400
  • MDEV-9993 – connect.json_udf_bin valgrind warnings
• Revision #fa10a65 2016-06-21 12:37:39 +0300
  • MDEV-9356: innodb.innodb_bug53290 fails (crashes) on sol10-64 in buildbot
• Revision #c3c4d55 2016-06-20 22:08:55 +0300
  • Merge commit from 10.1:
• Revision #a80dbe06 2016-06-20 14:11:01 +0400
  • MDEV-10020 InnoDB NOT IN Query Crash When One Item Is NULL
• Revision #70ad689 2016-06-20 09:58:31 +0300
  • MDEV-8633: information_schema.index_statistics doesn’t delete item when drop table indexes or drop table;
• Revision #e24a183 2016-06-18 10:46:55 +0400
  • MDEV-9969 mysql_install_db error processing ignore_db_dirs.
• Revision #0a50e43 2016-06-16 14:57:32 +0400
  • MDEV-9374 having ‘2015-01-01 01:00:00.000001’ > coalesce(NULL) returns true The problem was earlier fixed by the patch for MDEV-9521. Adding tests only.
• Revision #b21e7af 2016-06-16 13:41:45 +0400
  • MDEV-9969 mysql_install_db error processing ignore_db_dirs.
• Revision #0e50b92 2016-06-16 12:35:14 +0400
  • MDEV-9969 mysql_install_db error processing ignore_db_dirs.
• Revision #732e269 2016-06-08 15:16:24 +0200
  • Merge branch ‘mdev9991’ into mdev9991-10.0
• Revision #f9d453e 2016-05-28 13:11:09 +0300
  • Follow-up for commit 38b89a61c3ace83b32c079489922a0cae5106b56
• Revision #4b1b305 2016-05-27 22:52:03 +0400
  • Merge pull request #176 from iangilfillan/10.0
• Revision #a8422fa 2016-05-27 18:25:14 +0200
  • Update sponsors
• Revision #b6e826b 2016-05-24 23:15:00 +0200
  • MDEV-10118 : do not suggest upgrade from MySQL 5.7 to MariaDB 10.x in the installer. Do not lauch upgrade wizard after installation
• Revision #cee9ab9 2016-04-30 11:23:46 -0400
  • bump the VERSION

JARVIS

Interessiert in verschiedenste IT Themen, schreibe ich in diesem Blog über Software, Hardware, Smart Home, Games und vieles mehr. Ich berichte z.B. über die Installation und Konfiguration von Software als auch von Problemen mit dieser. News sind ebenso spannend, sodass ich auch über Updates, Releases und Neuigkeiten aus der IT berichte. Letztendlich nutze ich Taste-of-IT als eigene Dokumentation und Anlaufstelle bei wiederkehrenden Themen. Ich hoffe ich kann dich ebenso informieren und bei Problemen eine schnelle Lösung anbieten. Wer meinen Aufwand unterstützen möchte, kann gerne eine Tasse oder Pod Kaffe per PayPal spenden – vielen Dank.