mariadb-10.0 (10.0.23-0+deb8u1) jessie-security; urgency=high

  * New upstream release 10.0.23. Includes fixes for the following
    security vulnerabilities:
    - CVE-2016-2047
    - CVE-2016-0616
    - CVE-2016-0609
    - CVE-2016-0608
    - CVE-2016-0606
    - CVE-2016-0600
    - CVE-2016-0598
    - CVE-2016-0597
    - CVE-2016-0596
    - CVE-2016-0546
    - CVE-2016-0505
  * Update TokuDB plugin install and copyright paths to match latest
    release done under Percona ownership

 -- Otto Kekäläinen <otto@seravo.fi>  Fri, 22 Jan 2016 23:51:54 +0200

mariadb-10.0 (10.0.22-0+deb8u1) jessie-security; urgency=high

  [ Otto Kekäläinen ]
  * New upstream release 10.0.22. Includes fixes for the following
    security vulnerabilities (Closes: #802874):
    - CVE-2016-0610
    - CVE-2015-7744
    - CVE-2015-4802
    - CVE-2015-4807
    - CVE-2015-4815
    - CVE-2015-4826
    - CVE-2015-4830
    - CVE-2015-4836
    - CVE-2015-4858
    - CVE-2015-4861
    - CVE-2015-4870
    - CVE-2015-4913
    - CVE-2015-4792
  * New release includes updated man pages (Closes: #779992)
  * Add CVE IDs to previous changelog entries

  [ Arnaud Fontaine ]
  * New upstream release 10.0.21.
    + Refreshed debian/patches/*.
    + Upstream changed mysqld_safe_syslog.cnf to fix logging error
    + Includes fixes the following security vulnerabilities:
      - CVE-2015-4816
      - CVE-2015-4819
      - CVE-2015-4879
      - CVE-2015-4895

 -- Otto Kekäläinen <otto@seravo.fi>  Fri, 30 Oct 2015 00:07:24 +0200

mariadb-10.0 (10.0.20-0+deb8u1) jessie-security; urgency=high

  [ Otto Kekäläinen ]
  * New upstream release 10.0.20. Includes fixes for the following security
    vulnerabilities:
    - CVE-2015-3152: Client command line option --ssl-verify-server-cert (and
      MYSQL_OPT_SSL_VERIFY_SERVER_CERT option of the client API) when used
      together with --ssl will ensure that the established connection is
      SSL-encrypted and the MariaDB server has a valid certificate.
    - CVE-2015-3152
    - CVE-2015-2648
    - CVE-2015-2582
    - CVE-2015-4752
    - CVE-2015-2643
  * Includes fixes done in 10.0.18 for the following security vulnerabilities:
    - CVE-2015-4866
    - CVE-2014-8964 bundled PCRE contained heap-based buffer overflow
      vulnerability that allowed the server to crash or have other unspecified
      impact via a crafted regular expression made possible with the
      REGEXP_SUBSTR function (MDEV-8006).
    - CVE-2015-0501
    - CVE-2015-2571
    - CVE-2015-0505
    - CVE-2015-0499
    - CVE-2015-4757
  * Includes fixes done in 10.0.17 for the following security vulnerabilities:
    - CVE-2015-2568
    - CVE-2015-2573
    - CVE-2015-0433
    - CVE-2015-0441
  * Import of 10.0.17 included updated lines to the mariadb-server-10.0.postinst
    (upstream commit dc94bd0) which add parameter '--disable-log-bin' to the
    'mysql_install_db' and 'mysqld --bootstrap' commands
  * Security: improved hardening flags (hardening=+all,-pie) so that the
    resulting binaries would have closer to the same security features as the
    old binaries had when built using deprecated hardening-wrapper.
  * Removed /var/log/mysql.log from logrotate. No mysql related log should be
    directly under /var/log. The correct place is in /var/log/mysql
  * d/control: Related to innochecksum manpage move, also break/replace
    the mysql-client-5.5/6 packages (Closes: #779873)
  * Documentation changes:
    * Updated Swedish translation by Martin Bagge
      and Anders Jonsson (Closes: #781684)
    * Updated copyright file based on Lintian feedback

  [ Robie Basak ]
  * Move innochecksum back to mariadb-server-core-10.0 to align with other
    variants (LP: #1421520).

  [ Jan Wagner ]
  * Adding mysqld_multi.server_lsb-header.patch, provides LSB headers for
    example initscript (Closes: #778762)
  * Adding mysqld_multi_confd.patch, makes mysqld_multi reading conf.d
    (Closes: #778761)

 -- Otto Kekäläinen <otto@seravo.fi>  Sun, 10 May 2015 18:41:11 +0300

mariadb-10.0 (10.0.16-1) unstable; urgency=low

  [ Julien Muchembled ]
  * Fix inclusion of Mroonga & TokuDB plugins in mariadb-server-10.0

  [ Otto Kekäläinen ]
  * Imported Upstream version 10.0.16. Inludes fixes for the following security
    vulnerabilities:
    - CVE-2015-0411
    - CVE-2015-0382
    - CVE-2015-0381
    - CVE-2015-0432
    - CVE-2014-6568
    - CVE-2015-0374
  * Backported new cacert.pem etc from 5.5 the replace the expired ones.
  * Update the mail.ssl test to match new cacert.pem

 -- Otto Kekäläinen <otto@seravo.fi>  Tue, 03 Feb 2015 08:51:03 +0200

mariadb-10.0 (10.0.15-3) unstable; urgency=low

  * Fixed an if-structure in the init script so that the return value will be
    correct and not mess up invoke-rc.d (Closes: #773282).

 -- Otto Kekäläinen <otto@seravo.fi>  Sun, 21 Dec 2014 03:14:15 +0200

mariadb-10.0 (10.0.15-2) unstable; urgency=low

  * Fix mariadb-server-10.0.postinst so that the flag removal will not emit
    an error code if there are no previous debian-*.flag files. This will
    fix a dpkg issue cought by piuparts testing (Closes: #773030).
  * Increase the debconf downgrade warning dialog priority to critical to make
    sure all users see it and understand why their system broke after downgrade.
  * Fix FTBFS on mips and mipsel introduced by upstream release 10.0.15
    (Closes: #772964).

 -- Otto Kekäläinen <otto@seravo.fi>  Sun, 14 Dec 2014 19:07:50 +0200

mariadb-10.0 (10.0.15-1) unstable; urgency=low

  [ Arnaud Fontaine ]
  * Bump libpcre3-dev Build-Depends to >= 2:8.35-3.2~ (Closes: #767903).

  [ Otto Kekäläinen }
  * New upstream release, includes fixes for the following security issues:
    - CVE-2014-6507
    - CVE-2014-6491
    - CVE-2014-6500
    - CVE-2014-6469
    - CVE-2014-6555
    - CVE-2014-6559
    - CVE-2014-6494
    - CVE-2014-6496
    - CVE-2014-6464
  * Disable on non-amd64 platforms the new Mroonga storage engine which
    was introduced in the new upstream release.
  * Allow mariadb-server-10.0 to overwrite file man1/mysql_plugin.1.gz in
    mysql-client-5.5 with breaks and replaces (Closes: #771213).
  * Clean up old debian-*.flag files from datadir to avoid unexpected
    behavior at later upgrades (Closes: #770177).

 -- Otto Kekäläinen <otto@seravo.fi>  Tue, 25 Nov 2014 21:45:43 +0200

mariadb-10.0 (10.0.14-4) unstable; urgency=low

  * Updated patch d/username-in-tests-replace.patch to fix the
    obfuscation done by anti-spam measures in the MariaDB
    commit message view (Closes: #769865).
  * Unified indentantion to two spaces in init file for easier
    debugging of #609537

 -- Otto Kekäläinen <otto@seravo.fi>  Mon, 17 Nov 2014 11:45:11 +0200

mariadb-10.0 (10.0.14-3) unstable; urgency=low

  * Added patch d/username-in-tests-replace.patch to fix
    test failure (Closes: #769212).
  * Added versioned dependency on libpcre3 (Closes: #767903).

 -- Otto Kekäläinen <otto@seravo.fi>  Wed, 12 Nov 2014 15:00:11 +0300

mariadb-10.0 (10.0.14-2) unstable; urgency=low

  [ Tobias Frost ]
  * Fix two lintian warnings in d/copyright (missing "-" between GPL and 2)
  * Always be verbose when building the package and show compiler args

  [ Otto Kekäläinen ]
  * Upload to unstable
  * Updated German translation by Chris Leick and Holger Wansing
    (Closes: #763952)
  * Updated Dutch translation by Frans Spiesschaert (Closes: #764013)
  * Removed libssl-dev from build dependencies in favour of using
    bundled YaSSL instead (Closes: #761911)
  * Fixed debconf value saving (Closes: #761452)
  * Re-enabled TokuDB after backporting upstream fix in MDEV-6815
  * Removed libmariadbclient packages that provided the Debian-only
    libmariadbclient.so library that nobody used. Instead developers are
    encouraged to use the libraries from the package libmariadb-client-lgpl
    instead (Closes: #739452) (Closes: #742172).

 -- Otto Kekäläinen <otto@seravo.fi>  Sat, 18 Oct 2014 19:00:11 +0300

mariadb-10.0 (10.0.14-1) experimental; urgency=low

  * New upstream release. (Closes: #757026)
  * d/control: Removed Provides: libmysqlclient-dev (Closes: #759309)
  * d/control: Removed Provides: libmysqld-dev with same motivation
  * Updated Swedish translation by Martin Bagge
    and Anders Jonsson (Closes: #762795)
  * Updated Spanish translation by Javier Fernandez-Sanguino (Closes: #762751)
  * Updated Portugese translation by Miguel Figueiredo (Closes: #763194)
  * Updated Czech translation by Miroslav Kure (Closes: #763309)

 -- Otto Kekäläinen <otto@seravo.fi>  Thu, 28 Aug 2014 00:39:02 +0300

mariadb-10.0 (10.0.10-1) experimental; urgency=low

  * Initial Upload (Closes: #740473)

 -- Otto Kekäläinen <otto@seravo.fi>  Tue, 01 Apr 2014 09:56:38 +0300
