Re: [BLFS Trac] #23386: mariadb-12.3.2

#23386: mariadb-12.3.2
-------------------------+--------------------------
 Reporter:  Bruce Dubbs  |       Owner:  Bruce Dubbs
     Type:  enhancement  |      Status:  closed
 Priority:  normal       |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:  fixed
 Keywords:               |
-------------------------+--------------------------
Comment (by Douglas R. Reno):

 Replying to [comment:7 Bruce Dubbs]:
 > Hmm.
 >
 > Upgrading MariaDB from version 11 to 12 requires a full backup, a clean
 shutdown, uninstalling the old binaries, installing the version 12
 binaries, and running the mariadb-upgrade utility to update system tables.
 Skipping this backup can result in unrecoverable data.

 We have instructions in the book to cover this already, but it's
 definitely not ideal. It should be under the instructions for installing
 the systemd units, but we should probably change the location on the
 page...

 While going through a bit of research for this, I discovered that 11.8.8
 contains fixes for three CVEs, one of which is rated as Critical:

 - CVE-2026-49261 (10.0 Critical)
 - CVE-2026-48165 (8.0 High)
 - CVE-2026-48163 (8.0 High)

 12.x is not affected as it removes the entirety of Galera from MariaDB.
 However, for existing users, upgrading this package could prove to be
 problematic if they are using the Galera functionality, and for 12.4/13.0
 users I'm going to suggest upgrading to 11.8.8 in a security advisory as a
 result.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23386#comment:9>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page