MDEV-29988 affects MariaDB in Ubuntu

[Otto Kekäläinen]

MariaDB had a severe memory consumption/performance regression that is fixed in latest MariaDB minor maintenance releases (10.3.38, 10.5.19, 10.6.12): https://jira.mariadb.org/browse/MDEV-29988

A stable update should be made to address this.

According to https://mariadb.com/kb/en/security/ the latest minor MariaDB releases do not include any security fixes.

I am working on updates for all maintained Ubuntu versions for MariaDB:
- mariadb-10.3 in Focal
- mariadb-10.6 in Jammy
- mariadb-10.6 in Kinetic

MariaDB in Lunar will automatically import the new version from Debian Sid once available.

Security sponsor note this: https://wiki.ubuntu.com/SecurityTeam/PublicationNotes#Sponsoring_MariaDB_Security_Updates

[Otto Kekäläinen (otto)]

MariaDB 10.3.38 for Ubuntu Focal is ready at https://salsa.debian.org/mariadb-team/mariadb-10.3/-/commits/ubuntu-20.04 and builds pass at https://launchpad.net/~mysql-ubuntu/+archive/ubuntu/mariadb-10.3/+builds?build_text=&build_state=all

MariaDB 10.6.12 for Ubuntu Jammy is ready at https://salsa.debian.org/mariadb-team/mariadb-server/-/commits/ubuntu-22.04 and builds pass at https://launchpad.net/~mysql-ubuntu/+archive/ubuntu/mariadb-10.6/+builds?build_text=&build_state=all

If you have any feedback after review, please post here so I can address it, or post Merge Request on Salsa-CI to get the exact thing changed as you want.

[Nishit Majithia (0xnishit)]

Hey otto,
Is MariaDB 10.6.12 ready for kinetic?
Let me know if it is ready
thanks

[Nishit Majithia (0xnishit)]

Also, can you please let us know which CVEs are being fixed here in these releases?
thanks

[Otto Kekäläinen (otto)]

I was waiting for some feedback before I finalize. Please read current
commit and changelog and comment.

As stated, this is not advertised by upstream as an security release and no
CVEs.

[Otto Kekäläinen (otto)]

MariaDB 10.6.12 for Ubuntu Kinetic is ready at https://salsa.debian.org/mariadb-team/mariadb-server/-/commits/ubuntu-22.10 and builds pass at https://launchpad.net/~mysql-ubuntu/+archive/ubuntu/mariadb-10.6/+builds?build_text=&build_state=all

PLEASE REVIEW COMMITS and give feedback before proceeding to upload.

[Otto Kekäläinen (otto)]

Related: 10.5.19 Bullseye stable update: https://bugs.debian.org/1031042

[Nishit Majithia (0xnishit)]

Thanks
It looks fine, will publish the package soon

[Nishit Majithia (0xnishit)]

But for kinetic, while building with `gbp buildpackage --git-builder="umt source"`
I am facing this error

```
patching file storage/rocksdb/rdb_io_watchdog.h
patching file storage/rocksdb/rdb_io_watchdog.cc
dpkg-source: info: the patch has fuzz which is not allowed, or is malformed
dpkg-source: info: if patch 'rocksdb-kfreebsd.patch' is correctly applied by quilt, use 'quilt refresh' to update it
dpkg-source: info: if the file is present in the unpacked source, make sure it is also present in the orig tarball
dpkg-source: info: restoring quilt backup files for rocksdb-kfreebsd.patch
dpkg-source: error: LC_ALL=C patch -t -F 0 -N -p1 -u -V never -E -b -B .pc/rocksdb-kfreebsd.patch/ --reject-file=- < kinetic-sponsoring/debian/patches/rocksdb-kfreebsd.patch subprocess returned exit status 1
dpkg-buildpackage: error: dpkg-source --before-build . subprocess returned exit status 2
debuild: fatal error at line 1182:
dpkg-buildpackage -us -uc -ui -S failed
ERROR: Could not spawn schroot. Result is: None.
gbp:error: 'umt source' failed: it exited with 1
```

[Otto Kekäläinen (otto)]

The test build on Launchpad would not have passed if the patches had not been refreshed. I tested refreshing locally again and indeed patches are already refreshed.

Can you please run these git commands and compare if you get the same output as I do?

```
± git show --summary --oneline
75f25d47725 (HEAD -> ubuntu-22.10, origin/ubuntu-22.10) Update changelog and refresh patches after 10.6.12 import

± git submodule
 4fbd4fd36a21efd9d1a7e17aba390e91c78693b1 extra/wolfssl/wolfssl (v5.5.4-stable)
 12bd1d5511fc2ff766ff6256c71b79a95739533f libmariadb (v3.3.4)
 b989238ff79969f86ffee66620495d57c8c00691 storage/columnstore/columnstore (vcolumnstore-6.4.6-1-3-gb989238ff)
 3846890513df0653b8919bc45a7600f9b55cab31 storage/maria/libmarias3 (heads/master)
 bba5e7bc21093d7cfa765e1280a7c4fdcd284288 storage/rocksdb/rocksdb (bba5e7bc)
 275a0af8c5b92f0ee33cfe9e23f3db5f59b56e9d wsrep-lib (heads/master-28-g275a0af)
```

[Nishit Majithia (0xnishit)]

thanks for the suggestion, it is building fine now

[Launchpad Janitor (janitor)]

This bug was fixed in the package mariadb-10.3 - 1:10.3.38-0ubuntu0.20.04.1

---------------
mariadb-10.3 (1:10.3.38-0ubuntu0.20.04.1) focal-security; urgency=medium

  * New upstream version 10.3.38. Includes fix for a major
    performance/memory consumption issue (MDEV-29988) (LP: #2006882).

 -- Otto Kekäläinen <email address hidden> Thu, 09 Feb 2023 22:57:07 -0800

[Launchpad Janitor (janitor)]

This bug was fixed in the package mariadb-10.6 - 1:10.6.12-0ubuntu0.22.10.1

---------------
mariadb-10.6 (1:10.6.12-0ubuntu0.22.10.1) kinetic-security; urgency=medium

  * New upstream version 10.6.12. Includes fix for a major
    performance/memory consumption issue (MDEV-29988) (LP: #2006882).

 -- Otto Kekäläinen <email address hidden> Thu, 16 Feb 2023 22:15:28 -0800