MariaDB itself is NOT affected by the DROWN vulnerability

Recently a serious vulnerability called DROWN was found. The vulnerability exists in systems that support SSLv2. There is flaw in SSLv2 that could be used to decrypt information over newer SSL protocols such as TLS. More information about the DROWN vulnerability with CVE number CVE-2016-0800 can be found here:

Last December Sergei Golubchik wrote a blog post about The State of SSL in MariaDB, which explains what versions of SSL cryptography is used in which MariaDB version and what is inherited from MySQL. …

MariaDB 10.1.12 and MariaDB Galera Cluster 10.0.24 & 5.5.48 now available

The MariaDB project is pleased to announce the immediate availability of MariaDB 10.1.12, and MariaDB Galera Cluster 10.0.24 & 5.5.48. See the release notes and changelogs for details on these releases.

Download MariaDB 10.1.12

Release Notes Changelog What is MariaDB 10.1?

MariaDB APT and YUM Repository Configuration Generator


Download MariaDB Galera Cluster 10.0.24

Release Notes Changelog What is MariaDB Galera Cluster?


Download MariaDB Galera Cluster 5.5.48

Release Notes Changelog What is MariaDB Galera Cluster?

MariaDB 10.0.24 now available

The MariaDB project is pleased to announce the immediate availability of MariaDB 10.0.24. See the release notes and changelog for details on this release.

Download MariaDB 10.0.24

Release Notes Changelog What is MariaDB 10.0?

MariaDB APT and YUM Repository Configuration Generator

Thanks, and enjoy MariaDB! …

MariaDB 5.5.48 and Connector/J 1.3.5 now available

The MariaDB project is pleased to announce the immediate availability of MariaDB 5.5.48 and MariaDB Connector/J 1.3.5. See the release notes and changelogs for details on these releases.

Download MariaDB 5.5.48

Release Notes Changelog What is MariaDB 5.5?

MariaDB APT and YUM Repository Configuration Generator


Download MariaDB Connector/J 1.3.5

Release Notes Changelog About MariaDB Connector/J

Thanks, and enjoy MariaDB! …

MariaDB JIRA is moving

The MariaDB JIRA instance that currently is in use for project and issue tracking will change. The current instance is hosted in Atlassian’s cloud and it has worked well, but we have hit the maximum user limit of 2000 users. It’s fantastic to see how many of you actually report bugs and other issues in the MariaDB project!

To hit that limit also means that we have to migrate over to a self-hosted instance of JIRA. Below are important details about that change.

When will the switch happen: 
Sat 27th of Feb

What is the impact for me as a user of MariaDB’s JIRA:
1.

MariaDB 10.1.11 now available

The MariaDB project is pleased to announce the immediate availability of MariaDB 10.1.11. See the release notes and changelog for details on this release.

Download MariaDB 10.1.11

Release Notes Changelog What is MariaDB 10.1?

MariaDB APT and YUM Repository Configuration Generator

Thanks, and enjoy MariaDB! …

The State of SSL in MariaDB

Usually when one says “SSL” or “TLS” it means not a specific protocol but a family of protocols. Wikipedia article has the details, but in short — SSL 2.0 and SSL 3.0 are deprecated and should not be used anymore (the well-known POODLE vulnerability exploits the flaw in SSL 3.0). TLS 1.0 is sixteen years old and while it’s still being used, new security standards (for example PCI DSS v3.1) require TLS 1.1 or, preferably, TLS 1.2.

MySQL used to support TLS 1.0 since 2001. Which means MariaDB supported it from the day one, and never supported weaker SSL 2.0 or SSL 3.0. …

MariaDB 10.1.10 and MariaDB Galera Cluster 5.5.47 and 10.0.23 now available

The MariaDB project is pleased to announce the immediate availability of MariaDB 10.1.10, MariaDB Galera Cluster 5.5.47, and MariaDB Galera Cluster 10.0.23. See the release notes and changelogs for details on each release.

Download MariaDB 10.1.10

Release Notes Changelog What is MariaDB 10.1?

MariaDB APT and YUM Repository Configuration Generator


Download MariaDB Galera Cluster 5.5.47

Release Notes Changelog About MariaDB Galera Cluster


Download MariaDB Galera Cluster 10.0.23

Release Notes Changelog About MariaDB Galera Cluster

Thanks, and enjoy MariaDB! …