Package: mariadb-server Version: 1:10.5.28-0+deb11u1 Severity: normal X-Debbugs-Cc: t...@security.debian.org
The security update to version 10.5.28 (and likely other versions too) caused a bug by upstream commit https://github.com/MariaDB/server/commit/a69da0c31e97109bba099022acdd393f92fa127f MariaDB upstream introducted the bug in their fix for https://jira.mariadb.org/browse/MDEV-19761 The bug causes INSERT SELECT on NOT NULL columns to error if triggers are defined The bug is already fixed upstream in the commit https://github.com/MariaDB/server/commit/cd7513995dd67bf9376681c0986b8a5c484188c8 and documented in the ticket https://jira.mariadb.org/browse/MDEV-36026. Unfortunately the update is merged but not tagged as a version/release yet. I have rebuild mariadb-server with the fix-commit patched in, the resulting package seems to work fine at first sight. Please note the report had to be written on a debian 12 system. The problem definitely occurres on debian 11, wether it also affects debian 12 is unknown to me. -- System Information: Debian Release: 12.9 APT prefers stable-security APT policy: (500, 'stable-security'), (500, 'stable'), (100, 'bookworm-fasttrack'), (100, 'bookworm-backports-staging') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.1.0-31-amd64 (SMP w/16 CPU threads; PREEMPT) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages mariadb-server depends on: ii adduser 3.134 ii debconf [debconf-2.0] 1.5.82 ii galera-4 26.4.20-0+deb12u1 ii gawk 1:5.2.1-2 ii iproute2 6.1.0-3 ii libc6 2.36-9+deb12u9 ii libdbi-perl 1.643-4 ii libpam0g 1.5.2-6+deb12u1 ii libssl3 3.0.15-1~deb12u1 ii libstdc++6 12.2.0-14 ii lsof 4.95.0-1 ii mariadb-client 1:10.11.6-0+deb12u1 ii mariadb-common 1:10.11.6-0+deb12u1 ii mariadb-server-core 1:10.11.6-0+deb12u1 ii passwd 1:4.13+dfsg1-1+b1 ii perl 5.36.0-7+deb12u1 ii procps 2:4.0.2-3 ii psmisc 23.6-1 ii rsync 3.2.7-1+deb12u2 ii socat 1.7.4.4-2 ii zlib1g 1:1.2.13.dfsg-1 Versions of packages mariadb-server recommends: ii libhtml-template-perl 2.97-2 ii mariadb-plugin-provider-bzip2 1:10.11.6-0+deb12u1 ii mariadb-plugin-provider-lz4 1:10.11.6-0+deb12u1 ii mariadb-plugin-provider-lzma 1:10.11.6-0+deb12u1 ii mariadb-plugin-provider-lzo 1:10.11.6-0+deb12u1 ii mariadb-plugin-provider-snappy 1:10.11.6-0+deb12u1 ii pv 1.6.20-1 Versions of packages mariadb-server suggests: ii bsd-mailx [mailx] 8.1.2-0.20220412cvs-1 pn mariadb-test <none> pn netcat-openbsd <none> -- debconf information excluded