From 1ef50335dd5c0735e90bf042edc876f2fe154dbf Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Sun, 13 Feb 2022 21:24:07 +0100 Subject: [PATCH] package/mariadb: security bump to version 10.3.34 Fix CVE-2021-46665, CVE-2021-46664, CVE-2021-46661, CVE-2021-46668, CVE-2021-46663, CVE-2022-24052, CVE-2022-24051, CVE-2022-24050, CVE-2022-24048, CVE-2021-46659, CVE-2021-35604, CVE-2021-46667, CVE-2021-46662, CVE-2021-2372, CVE-2021-2389 and CVE-2021-46658 Update hash of README.md (changes not related to license: https://github.com/MariaDB/server/commit/773a07b65517327add6348c045cee14bdf489fe0) https://mariadb.com/kb/en/mariadb-10334-release-notes/ https://mariadb.com/kb/en/mariadb-10333-release-notes/ https://mariadb.com/kb/en/mariadb-10332-release-notes/ https://mariadb.com/kb/en/mariadb-10331-release-notes/ Signed-off-by: Fabrice Fontaine Signed-off-by: Peter Korsgaard (cherry picked from commit e7a9a1bce4b081a721799ff62ee5fff8456203ce) Signed-off-by: Peter Korsgaard --- package/mariadb/mariadb.hash | 7 +++---- package/mariadb/mariadb.mk | 4 ++-- 2 files changed, 5 insertions(+), 6 deletions(-) diff --git a/package/mariadb/mariadb.hash b/package/mariadb/mariadb.hash index 4025be317f..4da26bdf94 100644 --- a/package/mariadb/mariadb.hash +++ b/package/mariadb/mariadb.hash @@ -1,7 +1,6 @@ -# From https://downloads.mariadb.org/mariadb/10.3.30 -sha256 bd8735c65bdb7ebcd5d779fb9d3de3f2fcd319ad6482278d73dfe7301ad4ae1b mariadb-10.3.30.tar.gz -sha512 742c30b3ebc0b6d36b98d4e7a7fb511098142e72d8f42cbfa73a0bdea2059be17e790fbda4732329bbd99e4b50b13cf18e8122964a473e0b62170ab869eca8fc mariadb-10.3.30.tar.gz +# From https://dlm.mariadb.com/2117287/MariaDB/mariadb-10.3.34/source/sha512sums.txt +sha512 46d4575ec1afb68510652a4bb31ca5ce83a2f5f61048a6e9c1487b0ba58f079465a8b72518d44043cd42c631b19ff50b5498584676ac6473705b138fe3300741 mariadb-10.3.34.tar.gz # Hash for license files -sha256 a4665c1189fe31e0bbc27e9b55439df7dad6e99805407fe58d78da7aabe678f8 README.md +sha256 084aa0007efac6dda6aafffb3f3ef8b66b105862dad7ee23f6a4b52813f84464 README.md sha256 240a15a1d0f34d3abca462cdb7e5fb89470967563f16b0e71169e51c1e74cf2b COPYING diff --git a/package/mariadb/mariadb.mk b/package/mariadb/mariadb.mk index 374b3dc352..3fad22c8c1 100644 --- a/package/mariadb/mariadb.mk +++ b/package/mariadb/mariadb.mk @@ -4,8 +4,8 @@ # ################################################################################ -MARIADB_VERSION = 10.3.30 -MARIADB_SITE = https://downloads.mariadb.org/interstitial/mariadb-$(MARIADB_VERSION)/source +MARIADB_VERSION = 10.3.34 +MARIADB_SITE = https://dlm.mariadb.com/2117285/MariaDB/mariadb-$(MARIADB_VERSION)/source MARIADB_LICENSE = GPL-2.0 (server), GPL-2.0 with FLOSS exception (GPL client library), LGPL-2.0 (LGPL client library) # Tarball no longer contains LGPL license text # https://jira.mariadb.org/browse/MDEV-12297