Eating our own dog food – Running JIRA on MariaDB

A couple of weeks ago we announced that we were moving from a hosted instance of JIRA to our self hosted instance. The main reason was that we hit 2000 active users in the hosted instance of JIRA and that is the upper limit that it  supports. We obviously wanted to allow more people to be active in reporting and commenting on bugs and features for MariaDB. That’s why we set up our own instance, which now is up and running at jira.mariadb.org.

Thank you Atlassian, the company behind JIRA, for providing the hosted instance of JIRA for the MariaDB project over the last three years! …

MariaDB itself is NOT affected by the DROWN vulnerability

Recently a serious vulnerability called DROWN was found. The vulnerability exists in systems that support SSLv2. There is flaw in SSLv2 that could be used to decrypt information over newer SSL protocols such as TLS. More information about the DROWN vulnerability with CVE number CVE-2016-0800 can be found here:

Last December Sergei Golubchik wrote a blog post about The State of SSL in MariaDB, which explains what versions of SSL cryptography is used in which MariaDB version and what is inherited from MySQL. …

MariaDB 10.1.12 and MariaDB Galera Cluster 10.0.24 & 5.5.48 now available

The MariaDB project is pleased to announce the immediate availability of MariaDB 10.1.12, and MariaDB Galera Cluster 10.0.24 & 5.5.48. See the release notes and changelogs for details on these releases.

Download MariaDB 10.1.12

Release Notes Changelog What is MariaDB 10.1?

MariaDB APT and YUM Repository Configuration Generator


Download MariaDB Galera Cluster 10.0.24

Release Notes Changelog What is MariaDB Galera Cluster?


Download MariaDB Galera Cluster 5.5.48

Release Notes Changelog What is MariaDB Galera Cluster?

MariaDB 10.0.24 now available

The MariaDB project is pleased to announce the immediate availability of MariaDB 10.0.24. See the release notes and changelog for details on this release.

Download MariaDB 10.0.24

Release Notes Changelog What is MariaDB 10.0?

MariaDB APT and YUM Repository Configuration Generator

Thanks, and enjoy MariaDB! …

MariaDB 5.5.48 and Connector/J 1.3.5 now available

The MariaDB project is pleased to announce the immediate availability of MariaDB 5.5.48 and MariaDB Connector/J 1.3.5. See the release notes and changelogs for details on these releases.

Download MariaDB 5.5.48

Release Notes Changelog What is MariaDB 5.5?

MariaDB APT and YUM Repository Configuration Generator


Download MariaDB Connector/J 1.3.5

Release Notes Changelog About MariaDB Connector/J

Thanks, and enjoy MariaDB! …

MariaDB JIRA is moving

The MariaDB JIRA instance that currently is in use for project and issue tracking will change. The current instance is hosted in Atlassian’s cloud and it has worked well, but we have hit the maximum user limit of 2000 users. It’s fantastic to see how many of you actually report bugs and other issues in the MariaDB project!

To hit that limit also means that we have to migrate over to a self-hosted instance of JIRA. Below are important details about that change.

When will the switch happen: 
Sat 27th of Feb

What is the impact for me as a user of MariaDB’s JIRA:
1.

MariaDB 10.1.11 now available

The MariaDB project is pleased to announce the immediate availability of MariaDB 10.1.11. See the release notes and changelog for details on this release.

Download MariaDB 10.1.11

Release Notes Changelog What is MariaDB 10.1?

MariaDB APT and YUM Repository Configuration Generator

Thanks, and enjoy MariaDB! …

The State of SSL in MariaDB

Usually when one says “SSL” or “TLS” it means not a specific protocol but a family of protocols. Wikipedia article has the details, but in short — SSL 2.0 and SSL 3.0 are deprecated and should not be used anymore (the well-known POODLE vulnerability exploits the flaw in SSL 3.0). TLS 1.0 is sixteen years old and while it’s still being used, new security standards (for example PCI DSS v3.1) require TLS 1.1 or, preferably, TLS 1.2.

MySQL used to support TLS 1.0 since 2001. Which means MariaDB supported it from the day one, and never supported weaker SSL 2.0 or SSL 3.0. …