MariaDB itself is NOT affected by the DROWN vulnerability

Recently a serious vulnerability called DROWN was found. The vulnerability exists in systems that support SSLv2. There is flaw in SSLv2 that could be used to decrypt information over newer SSL protocols such as TLS. More information about the DROWN vulnerability with CVE number CVE-2016-0800 can be found here:

Last December Sergei Golubchik wrote a blog post about The State of SSL in MariaDB, which explains what versions of SSL cryptography is used in which MariaDB version and what is inherited from MySQL. …

MariaDB JIRA is moving

The MariaDB JIRA instance that currently is in use for project and issue tracking will change. The current instance is hosted in Atlassian’s cloud and it has worked well, but we have hit the maximum user limit of 2000 users. It’s fantastic to see how many of you actually report bugs and other issues in the MariaDB project!

To hit that limit also means that we have to migrate over to a self-hosted instance of JIRA. Below are important details about that change.

When will the switch happen: 
Sat 27th of Feb

What is the impact for me as a user of MariaDB’s JIRA:
1.

The State of SSL in MariaDB

Usually when one says “SSL” or “TLS” it means not a specific protocol but a family of protocols. Wikipedia article has the details, but in short — SSL 2.0 and SSL 3.0 are deprecated and should not be used anymore (the well-known POODLE vulnerability exploits the flaw in SSL 3.0). TLS 1.0 is sixteen years old and while it’s still being used, new security standards (for example PCI DSS v3.1) require TLS 1.1 or, preferably, TLS 1.2.

MySQL used to support TLS 1.0 since 2001. Which means MariaDB supported it from the day one, and never supported weaker SSL 2.0 or SSL 3.0. …

New MariaDB.org with fresh looks and contents

Today we have published a long overdue facelift of the MariaDB.org website. You are looking at the result right now! Some of the highlights are:

  • New responsive design with the new logo and a blue theme
  • The old blog has been merged into the main MariaDB.org site
  • The supporters of the Foundation are much more visible thanks to the big banner in the footer
  • What the MariaDB Foundation is and what it does is now better presented
  • Policies related to MariaDB and instructions on how to contribute to the open source project have been updated
  • It is now easier for individuals to donate to the Foundation thanks to the PayPal and Flattr buttons.

MariaDB Talks at Percona Live Data Performance Conference 2016

The Percona Live Data Performance Conference 2016 isn’t until 18-21 April 2016, but community voting is now open. So if you’re going, and want to see lots of MariaDB talks, please click on the buttons below and vote!

You have to be logged in to the Percona site to vote. Once logged in, scroll to the bottom of the talk description page, assign the number of stars that represents your interest in the talk (5 is the best) and click on the “Submit Vote” button. That’s all there is to it.

Here are all of the proposed talks I know of that are either specifically MariaDB-related or are by employees of either the MariaDB Foundation or MariaDB Corporation. …

MariaDB Connector/J failover support – case Amazon Aurora

MariaDB Connector/J has evolved a lot during the year. In this post I will talk about the failover capabilities in the connector and give some guidance on how to use them in some certain cases. One other important new feature that I’ll cover in a later article is the fact that MariaDB Connector/J can do load balancing over several servers now as well.

To start off with we’ll need the connector itself. Do either of the following to get version 1.2.3 of MariaDB Connector/J which is the newest stable version as of writing:

Welcome to the MariaDB Developers meeting in Amsterdam!

The 2015 MariaDB Developers meetup is taking place in Amsterdam, from October 13th to 15th. Anyone who is interested in contributing to the MariaDB project is welcome to join!

The event will be held in unconference style with lots of opportunities for discussions and collaboration around any topic, ranging from performance, new features, connectors to packaging and documentation. All core MariaDB developers will be present and available for discussions.

The meetup lasts for three days and you can join for the whole time, or as little time as you wish.

The schedule is drafted in a public spreadsheet.  …

MariaDB 10.1.7 now available

Download MariaDB 10.1.7

Release Notes Changelog What is MariaDB 10.1?

MariaDB APT and YUM Repository Configuration Generator

The MariaDB project is pleased to announce the immediate availability of MariaDB 10.1.7. This is a Release Candidate (RC) release.

See the Release Notes and Changelog for detailed information on this release and the What is MariaDB 10.1? page in the MariaDB Knowledge Base for general information about the MariaDB 10.1 series.

Thanks, and enjoy MariaDB! …