#1140854 bookworm-pu: package mariadb 1:10.11.18-0+deb12u1

#1140854#5
Date:
2026-06-27 19:59:42 UTC
From:
To:
Changelog:

mariadb (1:10.11.18-0+deb12u1) bookworm; urgency=medium

  * New upstream maintenance 10.11.18 includes several fixes as listed at
https://mariadb.com/docs/release-notes/community-server/10.11/10.11.18
    and fixes for the following CVE tracked security issues:
    - CVE-2026-49261
    - CVE-2026-48165
    - CVE-2026-48163
  * Previous upstream maintenance 10.11.17 included several fixes as listed at
https://mariadb.com/docs/release-notes/community-server/10.11/10.11.17
    and fixes for the following CVE tracked security issues:
    - CVE-2026-44173
    - CVE-2026-44172
    - CVE-2026-44171
    - CVE-2026-44170
    - CVE-2026-44168
  * Previous upstream maintenance 10.11.16 included several fixes as listed at
https://mariadb.com/docs/release-notes/community-server/10.11/10.11.16
    and fixes for the following CVE tracked security issues:
    - CVE-2026-3494
    - CVE-2026-34303
  * Previous upstream maintenance 10.11.15 included several fixes as listed at
https://mariadb.com/docs/release-notes/community-server/10.11/10.11.15
    and fixes for the following CVE tracked security issues:
    - CVE-2026-21968
    - CVE-2025-13699
  * New upstream versions included fixes for these Debian tracked issues:
    - MDEV-38698 Upgrade did not fix charset and collation for mysql.user,
      leading to "Illegal mix of collations" errors on upgrades or when trying
      to restore backups (Closes: #1104533, #1126850, #1137221)
    - MDEV-39479 Mroonga hangs on invalid index flag (Closes: #1110683)
    - MDEV-38811 Crash in information_schema.table_constraints when running in
     'skip-grant-tables' mode (Closes: #1127431, affected e.g. Akonadi)
  * Add debian/source/local-options to suppress WolfSSL and ColumnStore line
    ending errors
  * Include new upstream test file pam_mariadb_mtr.so
  * Update configuration traces to match changes in system variables
    - new variable 'innodb-buffer-pool-in-core-dump' (default: FALSE)
    - new default value 0->8796093022208 in 'innodb-buffer-pool-size-max'
  * Salsa CI: Use CI fixes from other branches to make pipeline fully green

Final debdiff can be posed only once MR at
https://salsa.debian.org/mariadb-team/mariadb-server/-/merge_requests/164
is finalized and approved.