commit 4c2c41a858e9d20543510a6b6661178968ecc552
Author: Aquila Macedo <aquilamacedo@riseup.net>
Date: Fri Jan 9 18:10:53 2026 -0300
Clarify NIS/YP debconf note for sysusers mysql account creation
Update the NIS/YP warning to reflect that systemd-sysusers edits
/etc/passwd and /etc/group and does not create users in NIS/LDAP, so
admins should ensure mysql is provided via NSS and matches local policy.
commit e3de9956283e351cb739d7b81cf4b59f1ba6fa0b
Author: Aquila Macedo <aquilamacedo@riseup.net>
Date: Fri Jan 9 18:03:12 2026 -0300
Drop adduser pre-depends, depend on systemd-sysusers provider
mariadb-server no longer uses adduser/addgroup in maintscripts, so drop
the adduser Pre-Depends and add an alternative Depends on a package
providing /usr/bin/systemd-sysusers.
commit c95b3d27df4aeaca8e24c408e50fe779fdfe958a
Author: Aquila Macedo <aquilamacedo@riseup.net>
Date: Thu Jan 8 22:42:36 2026 -0300
Create mysql via sysusers in postinst, drop preinst adduser handling
Stop creating the mysql system user/group in mariadb-server.preinst via
adduser/addgroup, and drop the related preinst ownership fixups.
Make sysusers the single source of truth for mysql account creation.
This avoids maintaining two competing code paths, ensures
/etc/sysusers.d overrides are respected, and lets us drop the
Pre-Depends on adduser.
Ensure the account exists in mariadb-server.postinst by applying the
shipped sysusers fragment with systemd-sysusers (honoring DPKG_ROOT)
before any (id -u mysql) checks, ownership changes, or
(mariadb-install-db --user=mysql) runs. Also remove the unnecessary sudo
usage and restore the datadir group ownership fixup (chgrp mysql) with
safer quoting and precedence.
commit f60417cfb628c7a42549c7cad8f944ce2c1e792c
Author: Aquila Macedo <aquilamacedo@riseup.net>
Date: Thu Jan 8 21:43:42 2026 -0300
Add patch sysusers-lock-mysql-account.patch
Adjusts the generated mariadb.conf sysusers fragment to match Debian's
long-standing mysql account properties.
Use u! to create a fully locked system account and set the home
directory to /nonexistent with /bin/false as the shell, instead of using
the datadir as the account home.
commit 4a46631b4a6e418ba1ca52281021c446c3b6dd27
Author: Aquila Macedo <aquilamacedo@riseup.net>
Date: Tue Dec 23 20:20:32 2025 -0500
Ship upstream sysusers.d mariadb.conf in mariadb-server
Install the upstream-generated sysusers fragment
/usr/lib/sysusers.d/mariadb.conf in the mariadb-server package and drop
it from debian/not-installed.
This makes the sysusers configuration available for systemd-sysusers and
local admin overrides via /etc/sysusers.d/.
Closes: #1028271
commit 3f57d51ab12102a1a4e25f63b263c43db41caaef
Author: Aquila Macedo <aquilamacedo@riseup.net>
Date: Sat Jan 10 15:14:02 2026 -0300
Drop obsolete library-not-linked-against-libc overrides
Lintian 2.128.1 removed the library-not-linked-against-libc check, so
keeping these overrides triggers alien-tag errors.
Remove the provider-specific *.lintian-overrides files that existed only
for this tag, and drop the remaining library-not-linked-against-libc
entries from mariadb-server and mariadb-test overrides.
Ref: https://salsa.debian.org/lintian/lintian/-/commit/02ee7f48e629bc5db2594376adbb57674eca0d5c
commit 2bb18a8cf1170b7c506b9c57640d8798a3b74298
Author: Otto Kekäläinen <otto@debian.org>
Date: Fri Jan 2 17:27:44 2026 -0800
Salsa CI: Remove failing 'mariadb-10.3 and Buster upgrade' job
The job 'mariadb-10.3 and Buster upgrade' was passing on December 23rd,
2025, but was failing on a run a week later. The error log ends with apt
nagging about unmet dependencies, as libedit2:amd64 depends libc6 version
2.42 or newer, which can't be installed due to the usrmerge workarounds
that force the libc version to be help 2.38 on Buster upgrades.
Instead of sinking effort in evolving the workaround, simply disable the
job as it failing is clearly not a sign of anything regressing in the
MariaDB packaging and keepign tests for upgrading from Buster has very low
value now that it is the release is long deprecated.
commit 79863d61bdbe48d55589da9ca4d700b0a9680a2b
Author: Otto Kekäläinen <otto@debian.org>
Date: Mon Dec 22 15:05:43 2025 -0800
Add tentative upstream patch to fix amd64v3 build issues (MDEV-38398)
Also disable two tests that failed on Launchpad.net to ensure builds and
the 'main' test suite in mariadb-test-run pass and migrations from
Ubuntu resolute-proposed to resolute don't get obstructed in vain on
tiny issues.
Note that `DEB_HOST_ARCH` on `amd64v3` is still `amd64`.
commit d966b97b757fc02234179e85dcbd8f892f31f21e
Author: Otto Kekäläinen <otto@debian.org>
Date: Mon Dec 22 15:04:22 2025 -0800
Open new changelog entry
commit c2af0e3428c4eff98ee919a7b821b8fd13857473
Author: Aquila Macedo <aquilamacedo@riseup.net>
Date: Thu Dec 18 19:10:35 2025 -0500
Handle missing /etc/mysql/debian.cnf
/etc/mysql/debian.cnf is a legacy credentials file from old
installations and is not present on new installs. Do not hardcode
--defaults-file or --defaults-extra-file pointing to it.
Only pass the option when /etc/mysql/debian.cnf is readable, so service
restarts and admin/upgrade commands do not fail when the file is absent.
Closes: #1056120
There is 1 open security issue in trixie.
You can find information about how to handle this issue in the security team's documentation.
There is 1 open security issue in bookworm.
You can find information about how to handle this issue in the security team's documentation.
Among the 15 debian patches available in version 1:11.8.5-3 of the package, we noticed the following issues:
![[bug history graph]](https://qa.debian.org/data/bts/graphs/m/mariadb.png){kind=link}