maria-discuss team mailing list archive

[Colin Charles <colin@xxxxxxxxxxxxxxxx>]

Hi!

On 7 Feb 2012, at 17:50, Clint Byrum wrote:

> So, here is a suggested plan, given the facts above:
> 
> * Upload mariadb 5.3 to Debian experimental, with it providing
> mysql-server, mysql-client, and libmysqlclient-dev.
> 
> * For Ubuntu users, upload these packages to a PPA for testing
> applications for compatibility, and rebuild testing.
> 
> * If testing goes well, replace mysql-5.5 with mariadb in both Debian
> unstable and Ubuntu precise. If there are reservations about switching
> this late in precise's cycle, ship mysql-5.5 in precise, and push off
> Ubuntu's transition until the next cycle.
> 
> Before I strike out on this path alone, which, I understand, may sound
> a bit radical, I want to hear what you all think.
> 
> Thank you for your time and consideration.

As we've spoken about this extensively before, I think the plan above is cogent and is something that should go forward. Security is no laughing matter, and we (at MariaDB) take it seriously and gladly poke around to see what's fixed, rewrite fixes if need be, etc. Let us do the heavy lifting.

Another reference post:
	http://blog.montyprogram.com/oracles-27-mysql-security-fixes-and-mariadb/

	cheers,
	-c
--
Colin Charles, http://bytebot.net/blog/ | twitter: @bytebot | skype: colincharles
MariaDB: Community developed. Feature enhanced. Backward compatible.
Download it at: http://www.mariadb.org/
Open MariaDB/MySQL documentation at the Knowledgebase: http://kb.askmonty.org/