[Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.3.34

[Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.3.34

[Fabrice Fontaine]

Fix CVE-2021-46665, CVE-2021-46664, CVE-2021-46661, CVE-2021-46668,
CVE-2021-46663, CVE-2022-24052, CVE-2022-24051, CVE-2022-24050,
CVE-2022-24048, CVE-2021-46659, CVE-2021-35604, CVE-2021-46667,
CVE-2021-46662, CVE-2021-2372, CVE-2021-2389 and CVE-2021-46658

Update hash of README.md (changes not related to license:
https://github.com/MariaDB/server/commit/773a07b65517327add6348c045cee14bdf489fe0)

https://mariadb.com/kb/en/mariadb-10334-release-notes/
https://mariadb.com/kb/en/mariadb-10333-release-notes/
https://mariadb.com/kb/en/mariadb-10332-release-notes/
https://mariadb.com/kb/en/mariadb-10331-release-notes/

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
 package/mariadb/mariadb.hash | 7 +++----
 package/mariadb/mariadb.mk   | 4 ++--
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/package/mariadb/mariadb.hash b/package/mariadb/mariadb.hash
index 4025be317f..4da26bdf94 100644
--- a/package/mariadb/mariadb.hash
+++ b/package/mariadb/mariadb.hash
@@ -1,7 +1,6 @@
-# From https://downloads.mariadb.org/mariadb/10.3.30
-sha256  bd8735c65bdb7ebcd5d779fb9d3de3f2fcd319ad6482278d73dfe7301ad4ae1b  mariadb-10.3.30.tar.gz
-sha512  742c30b3ebc0b6d36b98d4e7a7fb511098142e72d8f42cbfa73a0bdea2059be17e790fbda4732329bbd99e4b50b13cf18e8122964a473e0b62170ab869eca8fc  mariadb-10.3.30.tar.gz
+# From https://dlm.mariadb.com/2117287/MariaDB/mariadb-10.3.34/source/sha512sums.txt
+sha512  46d4575ec1afb68510652a4bb31ca5ce83a2f5f61048a6e9c1487b0ba58f079465a8b72518d44043cd42c631b19ff50b5498584676ac6473705b138fe3300741  mariadb-10.3.34.tar.gz
 
 # Hash for license files
-sha256  a4665c1189fe31e0bbc27e9b55439df7dad6e99805407fe58d78da7aabe678f8  README.md
+sha256  084aa0007efac6dda6aafffb3f3ef8b66b105862dad7ee23f6a4b52813f84464  README.md
 sha256  240a15a1d0f34d3abca462cdb7e5fb89470967563f16b0e71169e51c1e74cf2b  COPYING
diff --git a/package/mariadb/mariadb.mk b/package/mariadb/mariadb.mk
index db967ca3ed..4eb9c71827 100644
--- a/package/mariadb/mariadb.mk
+++ b/package/mariadb/mariadb.mk
@@ -4,8 +4,8 @@
 #
 ################################################################################
 
-MARIADB_VERSION = 10.3.30
-MARIADB_SITE = https://downloads.mariadb.org/interstitial/mariadb-$(MARIADB_VERSION)/source
+MARIADB_VERSION = 10.3.34
+MARIADB_SITE = https://dlm.mariadb.com/2117285/MariaDB/mariadb-$(MARIADB_VERSION)/source
 MARIADB_LICENSE = GPL-2.0 (server), GPL-2.0 with FLOSS exception (GPL client library), LGPL-2.0 (LGPL client library)
 # Tarball no longer contains LGPL license text
 # https://jira.mariadb.org/browse/MDEV-12297
-- 
2.34.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.3.34

[Peter Korsgaard]

Hi,

On 13/02/2022 21.24, Fabrice Fontaine wrote:
> Fix CVE-2021-46665, CVE-2021-46664, CVE-2021-46661, CVE-2021-46668,
> CVE-2021-46663, CVE-2022-24052, CVE-2022-24051, CVE-2022-24050,
> CVE-2022-24048, CVE-2021-46659, CVE-2021-35604, CVE-2021-46667,
> CVE-2021-46662, CVE-2021-2372, CVE-2021-2389 and CVE-2021-46658
> 
> Update hash of README.md (changes not related to license:
> https://github.com/MariaDB/server/commit/773a07b65517327add6348c045cee14bdf489fe0)
> 
> https://mariadb.com/kb/en/mariadb-10334-release-notes/
> https://mariadb.com/kb/en/mariadb-10333-release-notes/
> https://mariadb.com/kb/en/mariadb-10332-release-notes/
> https://mariadb.com/kb/en/mariadb-10331-release-notes/
> 
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Committed, thanks.

--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.3.34

[Peter Korsgaard]

>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:

 > Hi,
 > On 13/02/2022 21.24, Fabrice Fontaine wrote:
 >> Fix CVE-2021-46665, CVE-2021-46664, CVE-2021-46661, CVE-2021-46668,
 >> CVE-2021-46663, CVE-2022-24052, CVE-2022-24051, CVE-2022-24050,
 >> CVE-2022-24048, CVE-2021-46659, CVE-2021-35604, CVE-2021-46667,
 >> CVE-2021-46662, CVE-2021-2372, CVE-2021-2389 and CVE-2021-46658
 >> Update hash of README.md (changes not related to license:
 >> https://github.com/MariaDB/server/commit/773a07b65517327add6348c045cee14bdf489fe0)
 >> https://mariadb.com/kb/en/mariadb-10334-release-notes/
 >> https://mariadb.com/kb/en/mariadb-10333-release-notes/
 >> https://mariadb.com/kb/en/mariadb-10332-release-notes/
 >> https://mariadb.com/kb/en/mariadb-10331-release-notes/
 >> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

 > Committed, thanks.

Committed to 2021.02.x and 2021.11.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot