Your message dated Sun, 20 Feb 2022 01:48:47 +0000 with message-id <[email protected]> and subject line Bug#1005186: fixed in mariadb-10.6 1:10.6.7-1 has caused the Debian Bug report #1005186, regarding mariadb-10.5: Don't require debian.cnf to be executable in logrote configuration to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 1005186: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1005186 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Source: mariadb-10.5 Version: 1:10.5.11-1 Severity: important Tags: patch Dear Maintainer, When using a non-default configuration with password access to the database, the logrotate postscript fails causing the systemd service to be marked as failed: ● logrotate.service - Rotate log files Loaded: loaded (/lib/systemd/system/logrotate.service; static) Active: failed (Result: exit-code) since Wed 2021-09-15 00:00:01 CEST; 6h ago TriggeredBy: ● logrotate.timer Docs: man:logrotate(8) man:logrotate.conf(5) Process: 4138993 ExecStart=/usr/sbin/logrotate /etc/logrotate.conf (code=exited, status=1/FAILURE) Main PID: 4138993 (code=exited, status=1/FAILURE) CPU: 204ms Sep 15 00:00:01 foobar systemd[1]: Starting Rotate log files... Sep 15 00:00:01 foobar logrotate[4139061]: [64B blob data] Sep 15 00:00:01 foobar logrotate[4139061]: error: 'Access denied for user 'root'@'localhost' (using password: NO)' Sep 15 00:00:01 foobar logrotate[4138993]: error: error running shared postrotate script for '/var/lib/mysql/mysqld.log /var/log/mysql/mysql.log /var/lib/mysql/mariadb.log /var/log/mysql/mysql-slow.log /var/log/mysql/mariadb-s> Sep 15 00:00:01 foobar systemd[1]: logrotate.service: Main process exited, code=exited, status=1/FAILURE Sep 15 00:00:01 foobar systemd[1]: logrotate.service: Failed with result 'exit-code'. Sep 15 00:00:01 foobar systemd[1]: Failed to start Rotate log files. The problem is that the postrotate script only uses /etc/mysql/debian.cnf when it is executable, which a config file should not be. Changing the test from -x to -r to ensure the file exists and is readable resolves the issue. Please consider applying the attached patch and including it in the next stable update. Kind Regards, Bas--- debian/patches/1556.patch.orig 2021-09-15 06:39:17.106829777 +0200 +++ debian/patches/1556.patch 2021-09-15 06:40:47.294168561 +0200 @@ -146,7 +146,7 @@ + # has thanks to the default use of Unix socket authentication for the 'root' + # account used everywhere since MariaDB 10.4. + postrotate -+ if test -x /etc/mysql/debian.cnf ++ if test -r /etc/mysql/debian.cnf + then + EXTRAPARAM='--defaults-file=/etc/mysql/debian.cnf' + fi
--- End Message ---
--- Begin Message ---Source: mariadb-10.6 Source-Version: 1:10.6.7-1 Done: Otto Kekäläinen <[email protected]> We believe that the bug you reported is fixed in the latest version of mariadb-10.6, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Otto Kekäläinen <[email protected]> (supplier of updated mariadb-10.6 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 19 Feb 2022 16:00:00 -0800 Source: mariadb-10.6 Binary: libmariadb-dev libmariadb-dev-compat libmariadb3 libmariadbd19 libmariadbd-dev mariadb-common mariadb-client-core-10.6 mariadb-client-10.6 mariadb-server-core-10.6 mariadb-server-10.6 mariadb-server mariadb-client mariadb-backup mariadb-plugin-connect mariadb-plugin-s3 mariadb-plugin-rocksdb mariadb-plugin-oqgraph mariadb-plugin-mroonga mariadb-plugin-spider mariadb-plugin-gssapi-server mariadb-plugin-gssapi-client mariadb-plugin-cracklib-password-check mariadb-test mariadb-test-data Architecture: source Version: 1:10.6.7-1 Distribution: unstable Urgency: medium Maintainer: Debian MySQL Maintainers <[email protected]> Changed-By: Otto Kekäläinen <[email protected]> Description: libmariadb-dev - MariaDB database development files libmariadb-dev-compat - MariaDB Connector/C, compatibility symlinks libmariadb3 - MariaDB database client library libmariadbd-dev - MariaDB embedded database, development files libmariadbd19 - MariaDB embedded database, shared library mariadb-backup - Backup tool for MariaDB server mariadb-client - MariaDB database client (metapackage depending on the latest vers mariadb-client-10.6 - MariaDB database client binaries mariadb-client-core-10.6 - MariaDB database core client binaries mariadb-common - MariaDB common configuration files mariadb-plugin-connect - Connect storage engine for MariaDB mariadb-plugin-cracklib-password-check - CrackLib Password Validation Plugin for MariaDB mariadb-plugin-gssapi-client - GSSAPI authentication plugin for MariaDB client mariadb-plugin-gssapi-server - GSSAPI authentication plugin for MariaDB server mariadb-plugin-mroonga - Mroonga storage engine for MariaDB mariadb-plugin-oqgraph - OQGraph storage engine for MariaDB mariadb-plugin-rocksdb - RocksDB storage engine for MariaDB mariadb-plugin-s3 - Amazon S3 archival storage engine for MariaDB mariadb-plugin-spider - Spider storage engine for MariaDB mariadb-server - MariaDB database server (metapackage depending on the latest vers mariadb-server-10.6 - MariaDB database server binaries mariadb-server-core-10.6 - MariaDB database core server files mariadb-test - MariaDB database regression test suite mariadb-test-data - MariaDB database regression test suite - data files Closes: 976984 994665 1001649 1005186 Changes: mariadb-10.6 (1:10.6.7-1) unstable; urgency=medium . [ Otto Kekäläinen ] * New upstream version 10.6.7. Includes security fixes for - CVE-2021-46661 - CVE-2021-46663 - CVE-2021-46664 - CVE-2021-46665 - CVE-2021-46668 * New upstream version 10.6.6. Includes security fixes for - CVE-2021-46659 - CVE-2022-24048 - CVE-2022-24050 - CVE-2022-24051 - CVE-2022-24052 * Previous release 10.6.5 included security fixes for: - CVE-2021-46662 - CVE-2021-46667 * Notable upstream functional changes in 10.6.6 and 10.6.7: - New default value for innodb_change_buffering is 'none' instead of old value 'all' (MDEV-27734). This change should improve crash safety but might cause performance regressions on systems that use old spinning disks (HDD) where seek latency is higher. - New default value for innodb_read_only_compressed is 'OFF' instead of 'ON'. Upstream originally intended to deprecate ROW_FORMAT=COMPRESSED but abandoned the plan. - New default minimum value for innodb_buffer_pool_size is 20 MB (from 2 MB) * Drop MIPS and CTE patches applied now upstream * Add upstream patch to make Mroonga builds reproducible (Closes: #976984) * Add patch for potential kfreebsd-amd64 build failure (Closes: #994665) * Remove useless libaio-dev dependency from d/control (Closes: #1001649) . [ Faustin Lammler ] * Salsa-CI: use a mirror redirector for the CI . [ Bas Couwenberg ] * Don't require debian.cnf to be executable in logrotate (Closes: #1005186) . [ Tuukka Pasanen ] * Remove unneeded path from MariaDB server postinst script Checksums-Sha1: c2aabfe2a0c09bc2fe7470cecd4e15efbc035053 4548 mariadb-10.6_10.6.7-1.dsc 849abc69929f46eb5389819b4c2d958186c79a44 82653881 mariadb-10.6_10.6.7.orig.tar.gz 6fb5072b30580e3de5e354eb1416a699b648684a 220784 mariadb-10.6_10.6.7-1.debian.tar.xz 090399df52d9dba2f0c9aaf33259ea8be972500e 9274 mariadb-10.6_10.6.7-1_source.buildinfo Checksums-Sha256: f5b5241a62d6adb78bc4fa641f54c96b672c8a81a3de03caca15f9ac0f477969 4548 mariadb-10.6_10.6.7-1.dsc dfa096e02884c33ba14cd109aae43a5c65d1853561ccb3667ab983d854f73ad9 82653881 mariadb-10.6_10.6.7.orig.tar.gz 6644671cca49bfd0d039b0700285657cc38f4f99a1e731bbdbb537450930a1cc 220784 mariadb-10.6_10.6.7-1.debian.tar.xz 5226a18bc26e478cc228180123bc10f0ff5b91d3df332335eb35764af6ff8bf3 9274 mariadb-10.6_10.6.7-1_source.buildinfo Files: 7fad96cba1b56369cd3c949810c69ae3 4548 database optional mariadb-10.6_10.6.7-1.dsc b687c9ff379e0428bf7061b65b556af9 82653881 database optional mariadb-10.6_10.6.7.orig.tar.gz 615e0e3179fe86c3062d9b8af04bac47 220784 database optional mariadb-10.6_10.6.7-1.debian.tar.xz 2ed77a94703939a81e2d796f88f95ff9 9274 database optional mariadb-10.6_10.6.7-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmbRSsR88dMO0U+RvvthEn87o2ogFAmIRk+8ACgkQvthEn87o 2oipMA/8DSKK/ZY75pXLhZAHHT7xLeR+XOejVEtEUePJPWv/XC9Uzl3gHLO/iO0T 3Xn1gf/KrqHOJTmvC7xemjNmiIHiUhhgW+anqdgUOX9achC0L5DNrof98wAGV3nC b8s/G2/JJlkt8mgXstbplEA59Rb4dBcxP+rJwgzQboOQ49NEOACUpUezaA0+rs20 +5xf+V9Mfpp98+aWYDGRJU3wkd8MYr+Y9IaObYnO2BheV8sE+5wCQwFKfKOO2/V9 isRgKcmVEmYoz1hhw+f+sMbO5rMglPzI0bUpfXauDmIASXQn6KWsbh+LQe4j4x1y kQhKGcaKhpv2sEiT8UdMzKw72CR4cdWbZHVfZgzSHtyW94pA4sZiY27rUEczY6M/ CriH/wHUGQx0PS2s5yLj/E//TaHcTM8+xGRI6XQyb7PrPJtMHDuwL3G+nLvYPCAL QG6C3lNJMTAn5mgbIS//khqpKiz4XuHYnwz/QnVdaMwomm3yuwzKogkaTyZdoW/z NYuwtmCZcluPRbZ96eR2sphaBbihehu8tCL6X8p/R6ab8FpEQSF0VGieTSZ03pMV sj8jhAYllMOAugMeKfg8gPQLHm3kUMImXq3AY5+emtZg/6XBte0tywlMgWqL99KL YS4UIHx9Usd5eQkgyLkvvR0ytZMxL8agqSqdTC6BkzbjC61NzeI= =Xtqp -----END PGP SIGNATURE-----
--- End Message ---

