[Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.3.35

[Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.3.35

[Fabrice Fontaine]

Fix CVE-2021-46669, CVE-2022-21427, CVE-2022-27376, CVE-2022-27377,
CVE-2022-27378, CVE-2022-27379, CVE-2022-27380, CVE-2022-27381,
CVE-2022-27383, CVE-2022-27384, CVE-2022-27386, CVE-2022-27387,
CVE-2022-27445, CVE-2022-27447, CVE-2022-27448, CVE-2022-27449,
CVE-2022-27452, CVE-2022-27456 and CVE-2022-27458

https://mariadb.com/kb/en/mariadb-10335-release-notes

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
 package/mariadb/mariadb.hash | 4 ++--
 package/mariadb/mariadb.mk   | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/package/mariadb/mariadb.hash b/package/mariadb/mariadb.hash
index 4da26bdf94..f7e3c7b744 100644
--- a/package/mariadb/mariadb.hash
+++ b/package/mariadb/mariadb.hash
@@ -1,5 +1,5 @@
-# From https://dlm.mariadb.com/2117287/MariaDB/mariadb-10.3.34/source/sha512sums.txt
-sha512  46d4575ec1afb68510652a4bb31ca5ce83a2f5f61048a6e9c1487b0ba58f079465a8b72518d44043cd42c631b19ff50b5498584676ac6473705b138fe3300741  mariadb-10.3.34.tar.gz
+# From https://downloads.mariadb.org/mariadb/10.3.35
+sha512  9355de944eccef4e0bc01b19ffc3c0c72cf88befae7385c6f0ee1ea47dbd98d23f6bb46af9c140acc48d9d9613552870684bc0b7ca1f3cff1dc09c1a2c801573  mariadb-10.3.35.tar.gz
 
 # Hash for license files
 sha256  084aa0007efac6dda6aafffb3f3ef8b66b105862dad7ee23f6a4b52813f84464  README.md
diff --git a/package/mariadb/mariadb.mk b/package/mariadb/mariadb.mk
index 18667e7e70..06fd1484b6 100644
--- a/package/mariadb/mariadb.mk
+++ b/package/mariadb/mariadb.mk
@@ -4,8 +4,8 @@
 #
 ################################################################################
 
-MARIADB_VERSION = 10.3.34
-MARIADB_SITE = https://dlm.mariadb.com/2117285/MariaDB/mariadb-$(MARIADB_VERSION)/source
+MARIADB_VERSION = 10.3.35
+MARIADB_SITE = https://downloads.mariadb.org/interstitial/mariadb-$(MARIADB_VERSION)/source
 MARIADB_LICENSE = GPL-2.0 (server), GPL-2.0 with FLOSS exception (GPL client library), LGPL-2.0 (LGPL client library)
 # Tarball no longer contains LGPL license text
 # https://jira.mariadb.org/browse/MDEV-12297
-- 
2.35.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.3.35

[Arnout Vandecappelle]

On 06/06/2022 13:49, Fabrice Fontaine wrote:
> Fix CVE-2021-46669, CVE-2022-21427, CVE-2022-27376, CVE-2022-27377,
> CVE-2022-27378, CVE-2022-27379, CVE-2022-27380, CVE-2022-27381,
> CVE-2022-27383, CVE-2022-27384, CVE-2022-27386, CVE-2022-27387,
> CVE-2022-27445, CVE-2022-27447, CVE-2022-27448, CVE-2022-27449,
> CVE-2022-27452, CVE-2022-27456 and CVE-2022-27458
> 
> https://mariadb.com/kb/en/mariadb-10335-release-notes
> 
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

  Applied to master, thanks.

  Regards,
  Arnout

> ---
>   package/mariadb/mariadb.hash | 4 ++--
>   package/mariadb/mariadb.mk   | 4 ++--
>   2 files changed, 4 insertions(+), 4 deletions(-)
> 
> diff --git a/package/mariadb/mariadb.hash b/package/mariadb/mariadb.hash
> index 4da26bdf94..f7e3c7b744 100644
> --- a/package/mariadb/mariadb.hash
> +++ b/package/mariadb/mariadb.hash
> @@ -1,5 +1,5 @@
> -# From https://dlm.mariadb.com/2117287/MariaDB/mariadb-10.3.34/source/sha512sums.txt
> -sha512  46d4575ec1afb68510652a4bb31ca5ce83a2f5f61048a6e9c1487b0ba58f079465a8b72518d44043cd42c631b19ff50b5498584676ac6473705b138fe3300741  mariadb-10.3.34.tar.gz
> +# From https://downloads.mariadb.org/mariadb/10.3.35
> +sha512  9355de944eccef4e0bc01b19ffc3c0c72cf88befae7385c6f0ee1ea47dbd98d23f6bb46af9c140acc48d9d9613552870684bc0b7ca1f3cff1dc09c1a2c801573  mariadb-10.3.35.tar.gz
>   
>   # Hash for license files
>   sha256  084aa0007efac6dda6aafffb3f3ef8b66b105862dad7ee23f6a4b52813f84464  README.md
> diff --git a/package/mariadb/mariadb.mk b/package/mariadb/mariadb.mk
> index 18667e7e70..06fd1484b6 100644
> --- a/package/mariadb/mariadb.mk
> +++ b/package/mariadb/mariadb.mk
> @@ -4,8 +4,8 @@
>   #
>   ################################################################################
>   
> -MARIADB_VERSION = 10.3.34
> -MARIADB_SITE = https://dlm.mariadb.com/2117285/MariaDB/mariadb-$(MARIADB_VERSION)/source
> +MARIADB_VERSION = 10.3.35
> +MARIADB_SITE = https://downloads.mariadb.org/interstitial/mariadb-$(MARIADB_VERSION)/source
>   MARIADB_LICENSE = GPL-2.0 (server), GPL-2.0 with FLOSS exception (GPL client library), LGPL-2.0 (LGPL client library)
>   # Tarball no longer contains LGPL license text
>   # https://jira.mariadb.org/browse/MDEV-12297
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 1/1] package/mariadb: security bump to version 10.3.35

[Peter Korsgaard]

>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:

 > Fix CVE-2021-46669, CVE-2022-21427, CVE-2022-27376, CVE-2022-27377,
 > CVE-2022-27378, CVE-2022-27379, CVE-2022-27380, CVE-2022-27381,
 > CVE-2022-27383, CVE-2022-27384, CVE-2022-27386, CVE-2022-27387,
 > CVE-2022-27445, CVE-2022-27447, CVE-2022-27448, CVE-2022-27449,
 > CVE-2022-27452, CVE-2022-27456 and CVE-2022-27458

 > https://mariadb.com/kb/en/mariadb-10335-release-notes

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Committed to 2022.02.x, thanks.

-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot