All pages
Powered by GitBook
1 of 1

Loading...

Release Notes for MariaDB Enterprise Server 10.4.25-16

MariaDB Enterprise Server 10.4.25-16 is a maintenance release of MariaDB Enterprise Server 10.4. This release includes a variety of fixes.

MariaDB Enterprise Server 10.4.25-16 was released on 2022-06-13.

Fixed Security Vulnerabilities

CVE (with link)

CVSS base score

Backported Features

  • MariaDB Enterprise Server enables a predictable development and operations experience through an enterprise lifecycle. These new features have been backported after reaching maturity in MariaDB Community Server:

  • reads data as of specific timestamp from system-versioned tables. (MENT-1457)

  • Added to check JSON equality. (MENT-1452)

  • Added to normalize JSON values. (MENT-1456)

Notable Changes

  • Galera updated to 26.4.12

  • Spider storage engine refuses attempts to create a temporary table since the engine cannot itself store data and cannot create temporary tables on a remote server. ()

  • Status variables Innodb_encryption_key_rotation_list_length, Innodb_num_index_pages_written and Innodb_num_non_index_pages_written were unused and have been removed. (, )

Issues Fixed

Can result in data loss

  • When the parser converts a string from the binary character set to a multi-byte character set (such as utf32), an invalid string could be produced. ()

  • When rows are inserted into an intermediate temporary table via the , and then the rows are copied from the temporary table to a persistent table, the rows are not written to binary log if is set, which prevents the operation from properly replicating to replica servers. ()

  • When is set, can hang. ()

Can result in a hang or crash

  • With MariaDB Enterprise Cluster, powered by Galera, when is set to rsync or mariadb-backup, the donor node does not transfer the correct binary logs to the joiner node with some configurations. ()

  • When a window function is used in the global ORDER BY clause of a SELECT statement with a UNION, the statement should be rejected, but the server executes the statement and crashes with a segmentation fault. ()

  • When a stored procedure queries a view and uses a for loop, the server can crash with a segmentation fault when the stored procedure is called twice in the same session. (

ALTER TABLE on a large InnoDB table can hang. ()

  • Online DDL fails while checking for instant alter condition. ()

  • With MariaDB Enterprise Cluster (Galera), parallel async replication hangs on a Galera node when slave-parallel-threads greater than 1 is used. ()

  • With MariaDB Enterprise Cluster (Galera), possible crash after a conflict of the applier thread with a stored procedure call triggered by the event scheduler. ()

Can result in unexpected behavior

  • When is executed on a sequence, the server raises an , even if is set to ROW or MIXED. ()

    • The warning can appear in the as the following:[Warning] Unsafe statement written to the binary log using statement format since BINLOG_FORMAT = STATEMENT. Statement is unsafe because it uses a system function that may return a different value on the slave Statement: OPTIMIZE TABLE SEQUENCE_NAME

With , the parser allows functions to be called using PACKAGE_NAME.FUNCTION_NAME(), but the parser raises a if the function is called using DATABASE_NAME.PACKAGE_NAME.FUNCTION_NAME(). ()

  • When a view is used to update multiple rows of a in a single , the server incorrectly raises a . ()

    • The warning can appear on the client as the following after executing : View being updated does not have complete key of underlying table in it

  • When using with and , events from the primary server's currently active log file are not written to their respective log file specified by . ()

Related to install and upgrade

Galera snapshot transfer fails to upgrade between some major versions. ()

On Windows, MSI installer does not install client shared libraries. ()

After upgrade, mysql.plugin table has an entry for Semi-sync Replication, though this former plugin functionality is now built-in. ()

  • On RPM-based distributions, the Spider storage engine is distributed as a separate RPM package. (MENT-1092)

    • In prior releases, Spider's components were installed with the server's RPM package.

    • Starting with this release, Spider adds unixODBC as a dependency, so Spider has been moved to a separate RPM package to avoid adding new dependencies to the server's RPM package. For users of RPM-based distributions who loaded the Spider plugin with previous ES 10.4 releases, Spider's new RPM package and dependencies must be installed after upgrading to this release.

Interface Changes

  • system variable added

  • system variable removed

  • status variable removed

  • status variable removed

Platforms

In alignment with the , MariaDB Enterprise Server 10.4.25-16 is provided for:

  • CentOS 7 (x86_64)

  • Debian 10 (x86_64, ARM64)

  • Microsoft Windows (x86_64) (MariaDB Enterprise Cluster excluded)

  • Red Hat Enterprise Linux 7 (x86_64)

Some components of MariaDB Enterprise Server might not support all platforms. For additional information, see .

Installation Instructions

Upgrade Instructions

Added . (MENT-1451)

  • Added Enterprise Spider ODBC support. (MENT-1092)

    • Spider now supports the ODBC wrapper in this release series which was previously supported in MariaDB Enterprise Server 10.5 and 10.6.

    • Spider/ODBC allows federated access to ODBC resources.

  • Starting with this release, when is set to rsync or mariadb-backup, the sst_max_binlogs SST option can be specified in the [sst] option group in configuration files. This parameter specifies the number of binary log files to be sent to the joiner node during SST. (MDEV-27524)

    • The default value is 0:

      • If a binlog exists, it will be transferred.

      • If a binlog does not exist, no binlog will be transferred.

  • Server error messages are available in Chinese. (MDEV-28227)

  • MariaDB ColumnStore support is discontinued for MariaDB Enterprise Server 10.4. (MENT-1433)

  • Starting with this release, the has been removed.

  • When a replica server's I/O thread receives an incomplete event group from the primary server, the replica server continues writing events to the relay log and does not raise an error. (MDEV-27697)

  • Semisync-replica server recovery fails to rollback a prepared transaction. (MENT-1534)

  • If a primary is shutdown during an active semi-sync connection during the period when the primary is awaiting an ACK, the primary hard kills the active communication thread and does not ensure the transaction was received by a replica. This can lead to an inconsistent replication state. (MDEV-11853)

  • )
  • When is executed on an encrypted tablespace file using the , innochecksum crashes with a segmentation fault unless the is also specified. (MDEV-27835)

  • When an invalid is used inside of a or statement, the server can crash while parsing the statement. (MDEV-28220)

  • When a table contains a virtual generated column that is defined using the and functions, inserting a row into the table can cause the server to crash with a segmentation fault. (MDEV-24176)

  • When a non-updateable view is defined with ALGORITHM=TEMPTABLE, selecting data from the view can cause the server to crash with a segmentation fault. (MDEV-21028)

  • When a UNION of decimal types is performed in an ORDER BY clause, the server can crash with a segmentation fault. (MDEV-25994)

  • When a stored procedure executes a query that results in a mergeable derived table, the server can crash with a segmentation fault when the stored procedure is called twice in the same session. (MDEV-27212)

    • Querying views can result in mergeable derived tables.

    • Using subqueries with outer references can result mergeable derived tables.

  • When ANALYZE FORMAT=JSON is executed with a query that contains a subquery, the server can crash. (MDEV-28268)

  • When a query using a window function with an OVER (PARTITION BY ..) or OVER (ORDER BY ..) clause is executed, the server can crash with a segmentation fault. (MDEV-19398)

    • If the query also uses WITH ROLLUP, this crash is more likely.

    • If the query's OVER (PARTITION BY ..) or OVER (ORDER BY ..) clause uses an aggregate function, this crash is more likely.

  • When a query contains an outer join expression and a non-correlated subquery that the optimizer determines is low cost, executing the query can cause the server to crash if the optimizer also determines that the inner join expression can be eliminated. (MDEV-28437)

  • With MariaDB Enterprise Cluster, a joiner node's binary logs could be deleted during an Incremental State Transfer (IST), which causes the node to fail to start, because it can not read the binary logs. (MDEV-28583)

    • This issue is confirmed to happen with set to rsync, but it might also occur with other SST/IST methods.

  • Server crashes when executing a shutdown statement after starting an XA transaction. (MDEV-26575)

  • Possible server crash during mariadbd initialization if the number of GTIDs added since the last purge of the mysql.gtid_slave_pos tables is greater than or equal to the --gtid-cleanup-batch-size value. (MDEV-26473)

  • Possible server crash if an INSERT .. SELECT or REPLACE .. SELECT statement contains an ON expression in the top-level select and this expression used a subquery with a column reference. (MDEV-28578)

  • When an or statement uses an clause, the server raises an ER_UPDATE_WITHOUT_KEY_IN_SAFE_MODE error. (MDEV-18304)
    • The error can appear on the client as the following:You are using safe update mode and you tried to update a table without a WHERE that uses a KEY column

  • When an uses a subquery inside an clause, the optimizer could incorrectly choose to perform a full table scan (with type: ALL) when a range scan (with type: range) would be more efficient. (MDEV-22377)

  • When a table contains multiple columns with identical values, the values could become corrupt if multi-byte character sets are used. (MDEV-28078)

  • When columns are read from , the server could incorrectly raise an ER_BAD_DATA warning. (MDEV-28131)

    • The warning can appear on the client as the following after executing : Encountered illegal value '' when converting to DECIMAL

  • When a prepared statement is used to execute , a different query plan can be returned on the second execution. (MDEV-19631)

  • When is enabled with semi-synchronous replication, the numbering on packet headers can become out of sync between the primary and replica servers, but the inconsistency does not have any negative impact with release builds of MariaDB Enterprise Server. (MDEV-25580)

  • The server and MariaDB Enterprise Backup can raise unnecessary warnings about tablespace IDs in some scenarios. (MDEV-27343)

    • The warning can appear as the following: InnoDB: Allocated tablespace ID TABLESPACE_ID for DATABASE_NAME/TABLE_NAME, old maximum was 0

    • This warning can be written to standard output (stdout) when preparing a backup with MariaDB Enterprise Backup.

    • This warning can be written to the when InnoDB performs crash recovery at startup.

  • With MariaDB Enterprise Cluster, the joiner node fails to complete an SSwhen specifies a directory different than . (MDEV-27740)

  • When a non-partitioned table using the DATA DIRECTORY clause is converted to a partitioned table, the DATA DIRECTORY clause is silently ignored, and the partitioned table is moved to the default directory. (MDEV-27065)

  • Starting with this release, the server will raise the WARN_OPTION_IGNORED warning.

  • When a table contains an invisible column, does not produce the correct in the backup file. (MDEV-28253)

  • When a Spider table is queried using IF(COUNT() ..), the server can raise an ER_BAD_FIELD_ERROR error. (MDEV-25116)

  • With MariaDB Enterprise Cluster, State Snapshot Transfers (SSTs) can fail on the donor nodwhen binary logs are enabled. (MDEV-26201)

  • With MariaDB Enterprise Cluster, when contains an IPv6 address and is set to the default value of AUTO, State Snapshot Transfers (SST) can fail. (MDEV-26171)

  • With , replication can break if a system versioned table has been created on the replica via mariadb-dump, if the original table was altered before. (MDEV-28254)

  • mariadb-backup does not detect multi-source replication primary. (MDEV-21037)

  • Master_SSL_Crl shows Master_SSL_CA value in SHOW SLAVE STATUS output. (MDEV-28428)

  • MariaDB Audit plugin produces corrupted log entries for CONNECT events. (MENT-1438)

  • mariadb-dump does not create a dump where the sql_mode is set correctly for SQL/PL packages. (MDEV-27816)

  • Missing binlog data for INSERT .. ON DUPLICATE KEY UPDATE (MDEV-28310)

  • mariadb-backup prepare fails for incremental backups if a new schema is created after full backup. (MDEV-28446)

  • Optimizer uses all partitions during an UPDATE and ignores partitioning filters. (MDEV-28246)

  • When is executed and is set to MIXED, the server raises an ER_BINLOG_UNSAFE_STATEMENT warning even though the statement is written to the binary log in row-based format. (MDEV-21810)

    • The warning can appear in the MariaDB Error Log as the following: <<sql>>[Warning] Unsafe statement written to the binary log using statement format since BINLOG_FORMAT = STATEMENT. INSERT... ON DUPLICATE KEY UPDATE on a table with more than one UNIQUE KEY is unsafe Statement: INSERT INTO TABLE_NAME VALUES (..) ON DUPLICATE KEY UPDATE KEY_NAME = KEY_VALUE<</sql* >>

  • When INSERT .. ON DUPLICATE KEY UPDATE is executed and binlog_row_image is set to FULL, the server does not write unchanged columns to the binary log. (MDEV-21810)

  • Crash recovery fails if the configured server ID does not match the server ID in the crashed data directory. (MENT-1535)

  • PAM v2 plugin (auth_pam) produces zombie processes. (MENT-1443)

  • With MariaDB Enterprise Cluster (Galera), wsrep_incoming_addresses does not include address details. (MENT-1527)

  • With HashiCorp key management (hashicorp_key_management), dynamic changes to hashicorp_key_management_cache_timeout and hashicorp_key_management_cache_version_timeout system variables are ignored. (MENT-1512)

  • To install Spider's new package and dependencies on CentOS, Red Hat Enterprise Linux (RHEL), or Rocky Linux: $ sudo yum install MariaDB-spider-engine To install Spider's new package and dependencies on SUSE Linux Enterprise Server (SLES): $ sudo zypper install MariaDB-spider-engine

  • When the encryption plugin is loaded, should be used to take a logical backup before all minor and major upgrades due to changes that are not backward-compatible:

    • Starting with this release, the rejects encryption keys that contain non-digit characters in the hex notation.

    • If a database is encrypted with encryption keys that only contain digit characters in the hex notation, the encryption keys will continue to work with the new version.

    • If a database is encrypted with encryption keys that are no longer valid, it is recommended to upgrade by installing the new version to a clean system and restoring a logical backup of the data. However, another alternative is to migrate the system to a new encryption key that only contains digit characters in the hex notation prior to the upgrade. If the alternative route is taken, extra care must be taken to ensure that all encrypted data uses the new encryption key. For help with this process, contact .

    • When performing minor and major upgrades on Debian and Ubuntu, a logical backup must be taken before upgrading the server and plugin packages. When the old packages are upgraded, a message about plugin incompatibility is printed, but the server and plugin packages are upgraded anyway.

    • When performing minor upgrades on CentOS, RHEL, Rocky Linux, and SUSE, a logical backup can be taken before or after upgrading the server package. When the old packages are upgraded, a message about plugin incompatibility is printed, and the server package is upgraded, but the plugin package is not. The old plugin package must be manually removed, and then the new plugin package can be installed.

    • When performing major upgrades on CentOS, RHEL, Rocky Linux, and SUSE, a logical backup must be taken before upgrading the server and plugin packages. The old server and plugin packages must be manually removed, and then the new server and plugin packages can be installed.

    • When the plugin package is manually removed, the plugin configuration file can also be removed, so it is recommended to backup the file.

  • status variable removed

  • function added

  • function added

  • mariadb-backup --sst-max-binlogs command-line option added

  • mysqld --hashicorp-key-management-check-kv-version command-line option added

  • mysqld --password-reuse-check command-line option added

  • mysqld --password-reuse-check-interval command-line option added

  • mysqld --spider-buffer-size command-line option added

  • mysqld --spider-wrapper-protocols command-line option added

  • mariadb-dump --as-of command-line option added

  • password_reuse_check password_reuse_check.so plugin added

  • system table added

  • system variable added

  • system variable added

  • information schema table added

  • SPIDER_WRAPPER_PROTOCOLS ha_spider.so plugin added

  • Red Hat Enterprise Linux 8 (x86_64, ARM64)
  • Rocky Linux 8 (x86_64, ARM64 Red Hat Enterprise Linux 8 packages)

  • SUSE Linux Enterprise Server 12 (x86_64)

  • SUSE Linux Enterprise Server 15 (x86_64, ARM64)

  • Ubuntu 20.04 (x86_64, ARM64)

  • Enterprise Spider Federated Topology with MariaDB Enterprise Server 10.4

    7.5

    CVE-2022-27457

    7.5

    CVE-2022-27456

    7.5

    CVE-2022-27455

    7.5

    CVE-2022-27452

    7.5

    CVE-2022-27451

    7.5

    CVE-2022-27449

    7.5

    CVE-2022-27448

    7.5

    CVE-2022-27447

    7.5

    CVE-2022-27446

    7.5

    CVE-2022-27445

    7.5

    CVE-2022-27444

    7.5

    CVE-2022-27387

    7.5

    CVE-2022-27386

    7.5

    CVE-2022-27384

    7.5

    CVE-2022-27383

    7.5

    CVE-2022-27382

    7.5

    CVE-2022-27381

    7.5

    CVE-2022-27380

    7.5

    CVE-2022-27379

    7.5

    CVE-2022-27378

    7.5

    CVE-2022-27377

    7.5

    CVE-2022-27376

    7.5

    CVE-2022-21451

    7.5

    CVE-2022-32088

    6.5

    CVE-2022-32087

    6.5

    CVE-2022-32086

    6.5

    CVE-2022-32085

    6.5

    CVE-2022-32083

    6.5

    CVE-2021-46669

    6.5

    CVE-2022-21427

    4.9

    MDEV-28225
    MDEV-28541
    MDEV-28537
    MDEV-23210
    MDEV-24667
    MDEV-25975
    MDEV-27524
    MDEV-15208
    MDEV-28415
    MDEV-28060
    MDEV-27568
    MDEV-27713
    ER_BINLOG_UNSAFE_STATEMENT warning
    MDEV-24617
    MariaDB Error Log
    ER_PARSE_ERROR error
    MDEV-28166
    ER_WARN_VIEW_WITHOUT_KEY warning
    MDEV-22973
    MDEV-14608
    MDEV-27437
    MDEV-28581
    MDEV-21873
    enterprise lifecycle
    MariaDB Corporation Engineering Policies".
    10
    Enterprise Spider Sharded Topology with MariaDB Enterprise Server 10.4
    cve.org
    CVE-2022-27458
    MDEV-26009
    MariaDB Error Log
    wsrep_sst_method
    wsrep_sst_method
    wsrep_sst_method
    wsrep_node_address
    wsrep_sst_receive_address
    MariaDB Support
    mariadb-dump option --as-of
    JSON_EQUALS() function
    JSON_NORMALIZE() function
    LOAD DATA INFILE statement
    binlog_format=MIXED
    innodb_disallow_writes=ON
    mariadb-admin shutdown
    OPTIMIZE TABLE
    binlog_format
    sql_mode=ORACLE
    temporal table
    UPDATE statement
    SHOW WARNINGS
    mariadb-binlog
    --raw
    --stop-never
    --result-file
    hashicorp_key_management_check_kv_version
    innodb_disallow_writes
    Innodb_encryption_key_rotation_list_length
    Innodb_num_index_pages_written
    MariaDB Enterprise Server 10.4
    Enterprise Cluster Topology with MariaDB Enterprise Server
    .4
    Primary/Replica Topology with MariaDB Enterprise Server 10.4
    Upgrade to MariaDB Enterprise Server 10.4
    Upgrade from MariaDB Community Server to MariaDB Enterprise Server 10.4
    password_reuse_check password validation plugin
    innodb_disallow_writes system variable
    innochecksum
    --page-type-summary or -S option
    --page-type-dump or -D option
    CREATE SEQUENCE ... RESTART statement
    CREATE PROCEDURE
    CREATE FUNCTION
    IF()
    DATE_FORMAT()
    UPDATE
    DELETE
    OR
    UPDATE statement
    IN()
    ENUM
    DECIMAL
    information_schema.PROCESSLIST
    SHOW WARNINGS
    EXPLAIN
    slave_compressed_protocol
    innodb_log_group_home_dir
    server-system-variables/#datadir##datadir##
    mariadb-dump
    CREATE TABLE statement
    temporal tables
    INSERT .. ON DUPLICATE KEY UPDATE
    binlog_format
    hashicorp_key_management encryption plugin
    mariadb-dump
    hashicorp_key_management encryption plugin
    Innodb_num_non_index_pages_written
    JSON_EQUALS()
    JSON_NORMALIZE()
    password_reuse_check_history
    password_reuse_check_interval
    spider_buffer_size
    SPIDER_WRAPPER_PROTOCOLS

    This page is: Copyright © 2025 MariaDB. All rights reserved.