From 3ddacc46e4bf6934e33c993963a3782022d16ca1 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Mon, 25 May 2026 14:31:25 +0200 Subject: [PATCH] package/mariadb: security bump version to 10.11.17 https://mariadb.com/docs/release-notes/community-server/10.11/10.11.17 https://mariadb.com/docs/release-notes/community-server/changelogs/10.11/10.11.17 Fixes CVE-2026-44168, CVE-2026-44169, CVE-2026-44170, CVE-2026-44171, CVE-2026-44172 & CVE-2026-44173. https://mariadb.com/docs/release-notes/community-server/10.11/10.11.16 https://mariadb.com/docs/release-notes/community-server/changelogs/10.11/10.11.16 Fixes CVE-2026-3494 & CVE-2026-34303. Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/mariadb/mariadb.hash | 4 ++-- package/mariadb/mariadb.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/mariadb/mariadb.hash b/package/mariadb/mariadb.hash index 216b3be7e3..ca23b36a38 100644 --- a/package/mariadb/mariadb.hash +++ b/package/mariadb/mariadb.hash @@ -1,5 +1,5 @@ -# From https://downloads.mariadb.org/mariadb/10.11.15 -sha512 98d1e54954b69cf87a96be7d76f80333f27832a29279e6b0a9615b830e171713222abcb9ec9b9a545c0fc4a0f9f8e3d4774babcabf534a6fa3cb3dfdaed0dedc mariadb-10.11.15.tar.gz +# From https://downloads.mariadb.org/mariadb/10.11.17 +sha512 788803b15afbb6193111774a233d0db0604f27ebae3b4b439368e2d7caeffb662846e530fa65f453a6d77541cedb99112ea319c7c0c2ce5074c32aefb06a51aa mariadb-10.11.17.tar.gz # Hash for license files sha256 ff437f42ea15b42f3d9617e691b9f159f38a0b1b0748e482304857a5026ede90 README.md diff --git a/package/mariadb/mariadb.mk b/package/mariadb/mariadb.mk index e2c0cee3d5..c718c1ce7b 100644 --- a/package/mariadb/mariadb.mk +++ b/package/mariadb/mariadb.mk @@ -4,7 +4,7 @@ # ################################################################################ -MARIADB_VERSION = 10.11.15 +MARIADB_VERSION = 10.11.17 MARIADB_SITE = https://downloads.mariadb.org/interstitial/mariadb-$(MARIADB_VERSION)/source MARIADB_LICENSE = GPL-2.0 (server), GPL-2.0 with FLOSS exception (GPL client library), LGPL-2.0 (LGPL client library) # Tarball no longer contains LGPL license text