* New upstream maintenance release 10.6.23. For details about fixes please see
https://mariadb.com/docs/release-notes/community-server/10.6/10.6.24
(LP: #2120204)
* Update Lintian overrides for new files in latest upstream version
* Add debian/source/local-options to suppress WolfSSL line ending errors
-- Otto Kekäläinen <email address hidden> Fri, 10 Oct 2025 20:03:01 -0700
* New upstream release, LP: #2132084
- FDE: do not save incomplete FDE state when resealing was skipped
- FDE: warn of inconsistent primary or policy counter
- Confdb: document confdb in snapctl help messages
- Confdb: only confdb hooks wait if snaps are disabled
- Confdb: relax confdb change conflict checks
- Confdb: remove empty parent when removing last leaf
- Confdb: support parsing field filters
- Confdb: wrap confdb write values under "values" key
- dm-verity for essential snaps: add new naming convention for
verity files
- dm-verity for essential snaps: add snap integrity discovery
- dm-verity for essential snaps: fix verity salt calculation
- Assertions: add hardware identity assertion
- Assertions: add integrity stanza in snap resources revisions
- Assertions: add request message assertion required for remote
device management
- Assertions: add response-message assertion for secure remote
device management
- Assertions: expose WithStackedBackstore in RODatabase
- Packaging: cross-distro | install upstream NEWS file into relevant
snapd package doc directory
- Packaging: cross-distro | tweak how the blocks injecting
$SNAP_MOUNT_DIR/bin are generated as required for openSUSE
- Packaging: remove deprecated snap-gdb-shim and all references now
that snap run --gdb is unsupported and replaced by --gdbserver
- Preseed: call systemd-tmpfiles instead handle-writable-paths on
uc26
- Preseed: do not remove the /snap dir but rather all its contents
during reset
- snap-confine: attach name derived from security tag to BPF maps
and programs
- snap-confine: ensure permitted capabilities match expectation
- snap-confine: fix cached snap-confine profile cleanup to report
the correct error instead of masking backend setup failures
- snap-confine: Improve validation of user controlled paths
- snap-confine: tighten snap cgroup checks to ensure a snap cannot
start another snap in the same cgroup, preventing incorrect
device-filter installation
- core-initrd: add 26.04 ubuntu-core-initramfs package
- core-initrd: add missing order dependency for setting default
system files
- core-initrd: avoid scanning loop and mmc boot partitions as the
boot disk won't be any of these
- core-initrd: make cpio a Depends and remove from Build-Depends
- core-initrd: start plymouth sooner and reload when gadget is
available
- Cross-distro: modify syscheck to account for differences in
openSUSE 16.0+
- Validation sets: use in-flight validation sets when calling
'snapctl install' from hook
- Prompting: enable prompting for the camera interface
- Prompting: remove polkit authentication when modifying/deleting
prompting rules
- LP: #2127189 Prompting: do not record notices for unchange
* New upstream release, LP: #2132084
- FDE: do not save incomplete FDE state when resealing was skipped
- FDE: warn of inconsistent primary or policy counter
- Confdb: document confdb in snapctl help messages
- Confdb: only confdb hooks wait if snaps are disabled
- Confdb: relax confdb change conflict checks
- Confdb: remove empty parent when removing last leaf
- Confdb: support parsing field filters
- Confdb: wrap confdb write values under "values" key
- dm-verity for essential snaps: add new naming convention for
verity files
- dm-verity for essential snaps: add snap integrity discovery
- dm-verity for essential snaps: fix verity salt calculation
- Assertions: add hardware identity assertion
- Assertions: add integrity stanza in snap resources revisions
- Assertions: add request message assertion required for remote
device management
- Assertions: add response-message assertion for secure remote
device management
- Assertions: expose WithStackedBackstore in RODatabase
- Packaging: cross-distro | install upstream NEWS file into relevant
snapd package doc directory
- Packaging: cross-distro | tweak how the blocks injecting
$SNAP_MOUNT_DIR/bin are generated as required for openSUSE
- Packaging: remove deprecated snap-gdb-shim and all references now
that snap run --gdb is unsupported and replaced by --gdbserver
- Preseed: call systemd-tmpfiles instead handle-writable-paths on
uc26
- Preseed: do not remove the /snap dir but rather all its contents
during reset
- snap-confine: attach name derived from security tag to BPF maps
and programs
- snap-confine: ensure permitted capabilities match expectation
- snap-confine: fix cached snap-confine profile cleanup to report
the correct error instead of masking backend setup failures
- snap-confine: Improve validation of user controlled paths
- snap-confine: tighten snap cgroup checks to ensure a snap cannot
start another snap in the same cgroup, preventing incorrect
device-filter installation
- core-initrd: add 26.04 ubuntu-core-initramfs package
- core-initrd: add missing order dependency for setting default
system files
- core-initrd: avoid scanning loop and mmc boot partitions as the
boot disk won't be any of these
- core-initrd: make cpio a Depends and remove from Build-Depends
- core-initrd: start plymouth sooner and reload when gadget is
available
- Cross-distro: modify syscheck to account for differences in
openSUSE 16.0+
- Validation sets: use in-flight validation sets when calling
'snapctl install' from hook
- Prompting: enable prompting for the camera interface
- Prompting: remove polkit authentication when modifying/deleting
prompting rules
- LP: #2127189 Prompting: do not record notices for unchang
* New upstream release, LP: #2132084
- FDE: do not save incomplete FDE state when resealing was skipped
- FDE: warn of inconsistent primary or policy counter
- Confdb: document confdb in snapctl help messages
- Confdb: only confdb hooks wait if snaps are disabled
- Confdb: relax confdb change conflict checks
- Confdb: remove empty parent when removing last leaf
- Confdb: support parsing field filters
- Confdb: wrap confdb write values under "values" key
- dm-verity for essential snaps: add new naming convention for
verity files
- dm-verity for essential snaps: add snap integrity discovery
- dm-verity for essential snaps: fix verity salt calculation
- Assertions: add hardware identity assertion
- Assertions: add integrity stanza in snap resources revisions
- Assertions: add request message assertion required for remote
device management
- Assertions: add response-message assertion for secure remote
device management
- Assertions: expose WithStackedBackstore in RODatabase
- Packaging: cross-distro | install upstream NEWS file into relevant
snapd package doc directory
- Packaging: cross-distro | tweak how the blocks injecting
$SNAP_MOUNT_DIR/bin are generated as required for openSUSE
- Packaging: remove deprecated snap-gdb-shim and all references now
that snap run --gdb is unsupported and replaced by --gdbserver
- Preseed: call systemd-tmpfiles instead handle-writable-paths on
uc26
- Preseed: do not remove the /snap dir but rather all its contents
during reset
- snap-confine: attach name derived from security tag to BPF maps
and programs
- snap-confine: ensure permitted capabilities match expectation
- snap-confine: fix cached snap-confine profile cleanup to report
the correct error instead of masking backend setup failures
- snap-confine: Improve validation of user controlled paths
- snap-confine: tighten snap cgroup checks to ensure a snap cannot
start another snap in the same cgroup, preventing incorrect
device-filter installation
- core-initrd: add 26.04 ubuntu-core-initramfs package
- core-initrd: add missing order dependency for setting default
system files
- core-initrd: avoid scanning loop and mmc boot partitions as the
boot disk won't be any of these
- core-initrd: make cpio a Depends and remove from Build-Depends
- core-initrd: start plymouth sooner and reload when gadget is
available
- Cross-distro: modify syscheck to account for differences in
openSUSE 16.0+
- Validation sets: use in-flight validation sets when calling
'snapctl install' from hook
- Prompting: enable prompting for the camera interface
- Prompting: remove polkit authentication when modifying/deleting
prompting rules
- LP: #2127189 Prompting: do not record notices for uncha
* New upstream release, LP: #2132084
- FDE: do not save incomplete FDE state when resealing was skipped
- FDE: warn of inconsistent primary or policy counter
- Confdb: document confdb in snapctl help messages
- Confdb: only confdb hooks wait if snaps are disabled
- Confdb: relax confdb change conflict checks
- Confdb: remove empty parent when removing last leaf
- Confdb: support parsing field filters
- Confdb: wrap confdb write values under "values" key
- dm-verity for essential snaps: add new naming convention for
verity files
- dm-verity for essential snaps: add snap integrity discovery
- dm-verity for essential snaps: fix verity salt calculation
- Assertions: add hardware identity assertion
- Assertions: add integrity stanza in snap resources revisions
- Assertions: add request message assertion required for remote
device management
- Assertions: add response-message assertion for secure remote
device management
- Assertions: expose WithStackedBackstore in RODatabase
- Packaging: cross-distro | install upstream NEWS file into relevant
snapd package doc directory
- Packaging: cross-distro | tweak how the blocks injecting
$SNAP_MOUNT_DIR/bin are generated as required for openSUSE
- Packaging: remove deprecated snap-gdb-shim and all references now
that snap run --gdb is unsupported and replaced by --gdbserver
- Preseed: call systemd-tmpfiles instead handle-writable-paths on
uc26
- Preseed: do not remove the /snap dir but rather all its contents
during reset
- snap-confine: attach name derived from security tag to BPF maps
and programs
- snap-confine: ensure permitted capabilities match expectation
- snap-confine: fix cached snap-confine profile cleanup to report
the correct error instead of masking backend setup failures
- snap-confine: Improve validation of user controlled paths
- snap-confine: tighten snap cgroup checks to ensure a snap cannot
start another snap in the same cgroup, preventing incorrect
device-filter installation
- core-initrd: add 26.04 ubuntu-core-initramfs package
- core-initrd: add missing order dependency for setting default
system files
- core-initrd: avoid scanning loop and mmc boot partitions as the
boot disk won't be any of these
- core-initrd: make cpio a Depends and remove from Build-Depends
- core-initrd: start plymouth sooner and reload when gadget is
available
- Cross-distro: modify syscheck to account for differences in
openSUSE 16.0+
- Validation sets: use in-flight validation sets when calling
'snapctl install' from hook
- Prompting: enable prompting for the camera interface
- Prompting: remove polkit authentication when modifying/deleting
prompting rules
- LP: #2127189 Prompting: do not record notices for unchange
* New upstream release, LP: #2132084
- FDE: do not save incomplete FDE state when resealing was skipped
- FDE: warn of inconsistent primary or policy counter
- Confdb: document confdb in snapctl help messages
- Confdb: only confdb hooks wait if snaps are disabled
- Confdb: relax confdb change conflict checks
- Confdb: remove empty parent when removing last leaf
- Confdb: support parsing field filters
- Confdb: wrap confdb write values under "values" key
- dm-verity for essential snaps: add new naming convention for
verity files
- dm-verity for essential snaps: add snap integrity discovery
- dm-verity for essential snaps: fix verity salt calculation
- Assertions: add hardware identity assertion
- Assertions: add integrity stanza in snap resources revisions
- Assertions: add request message assertion required for remote
device management
- Assertions: add response-message assertion for secure remote
device management
- Assertions: expose WithStackedBackstore in RODatabase
- Packaging: cross-distro | install upstream NEWS file into relevant
snapd package doc directory
- Packaging: cross-distro | tweak how the blocks injecting
$SNAP_MOUNT_DIR/bin are generated as required for openSUSE
- Packaging: remove deprecated snap-gdb-shim and all references now
that snap run --gdb is unsupported and replaced by --gdbserver
- Preseed: call systemd-tmpfiles instead handle-writable-paths on
uc26
- Preseed: do not remove the /snap dir but rather all its contents
during reset
- snap-confine: attach name derived from security tag to BPF maps
and programs
- snap-confine: ensure permitted capabilities match expectation
- snap-confine: fix cached snap-confine profile cleanup to report
the correct error instead of masking backend setup failures
- snap-confine: Improve validation of user controlled paths
- snap-confine: tighten snap cgroup checks to ensure a snap cannot
start another snap in the same cgroup, preventing incorrect
device-filter installation
- core-initrd: add 26.04 ubuntu-core-initramfs package
- core-initrd: add missing order dependency for setting default
system files
- core-initrd: avoid scanning loop and mmc boot partitions as the
boot disk won't be any of these
- core-initrd: make cpio a Depends and remove from Build-Depends
- core-initrd: start plymouth sooner and reload when gadget is
available
- Cross-distro: modify syscheck to account for differences in
openSUSE 16.0+
- Validation sets: use in-flight validation sets when calling
'snapctl install' from hook
- Prompting: enable prompting for the camera interface
- Prompting: remove polkit authentication when modifying/deleting
prompting rules
- LP: #2127189 Prompting: do not record notices for unchange
* New upstream release, LP: #2132084
- FDE: do not save incomplete FDE state when resealing was skipped
- FDE: warn of inconsistent primary or policy counter
- Confdb: document confdb in snapctl help messages
- Confdb: only confdb hooks wait if snaps are disabled
- Confdb: relax confdb change conflict checks
- Confdb: remove empty parent when removing last leaf
- Confdb: support parsing field filters
- Confdb: wrap confdb write values under "values" key
- dm-verity for essential snaps: add new naming convention for
verity files
- dm-verity for essential snaps: add snap integrity discovery
- dm-verity for essential snaps: fix verity salt calculation
- Assertions: add hardware identity assertion
- Assertions: add integrity stanza in snap resources revisions
- Assertions: add request message assertion required for remote
device management
- Assertions: add response-message assertion for secure remote
device management
- Assertions: expose WithStackedBackstore in RODatabase
- Packaging: cross-distro | install upstream NEWS file into relevant
snapd package doc directory
- Packaging: cross-distro | tweak how the blocks injecting
$SNAP_MOUNT_DIR/bin are generated as required for openSUSE
- Packaging: remove deprecated snap-gdb-shim and all references now
that snap run --gdb is unsupported and replaced by --gdbserver
- Preseed: call systemd-tmpfiles instead handle-writable-paths on
uc26
- Preseed: do not remove the /snap dir but rather all its contents
during reset
- snap-confine: attach name derived from security tag to BPF maps
and programs
- snap-confine: ensure permitted capabilities match expectation
- snap-confine: fix cached snap-confine profile cleanup to report
the correct error instead of masking backend setup failures
- snap-confine: Improve validation of user controlled paths
- snap-confine: tighten snap cgroup checks to ensure a snap cannot
start another snap in the same cgroup, preventing incorrect
device-filter installation
- core-initrd: add 26.04 ubuntu-core-initramfs package
- core-initrd: add missing order dependency for setting default
system files
- core-initrd: avoid scanning loop and mmc boot partitions as the
boot disk won't be any of these
- core-initrd: make cpio a Depends and remove from Build-Depends
- core-initrd: start plymouth sooner and reload when gadget is
available
- Cross-distro: modify syscheck to account for differences in
openSUSE 16.0+
- Validation sets: use in-flight validation sets when calling
'snapctl install' from hook
- Prompting: enable prompting for the camera interface
- Prompting: remove polkit authentication when modifying/deleting
prompting rules
- LP: #2127189 Prompting: do not record notices for unchange
[ Otto Kekäläinen ]
* New upstream maintenance release 11.4.8. For details about fixes please see
https://mariadb.com/docs/release-notes/community-server/11.4/11.4.8
(LP: #2120204)
* Drop Hurd patches that are now included upstream
* Suppress native AIO warning introduced in upstream a87bb96
* Update server trace to include new parameters and values
* Remove obsolete cleanup as upstream moved pam_mariadb_mtr.so in c05b1fe
* Add debian/source/local-options to suppress WolfSSL line ending errors
* Salsa CI: Revert back to pre-sbuild pipeline version to builds can pass
[ Sergei Golubchik ]
* MDEV-36815 Fresh MariaDB 11.4 installation gives errors when configuring
utf8
-- Otto Kekäläinen <email address hidden> Thu, 09 Oct 2025 22:33:23 -0700
