[CLSA-2026:1793269506] cl-MariaDB106: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-29 15:56:43 UTC
Description:
- ELSCVE-227431: Fix CVE-2026-86047 - SQL injection via unquoted identifiers in SHOW CREATE and mariadb-dump (MDEV-39776, MDEV-39818, MDEV-40308, MDEV-40311) - ELSCVE-227433: Fix CVE-2026-85746 - ST_AsText buffer overflow on nested GeometryCollection (MDEV-40329) - ELSCVE-227430: Fix CVE-2026-92262 - #mysql50# prefix bypasses table-name filesystem encoding (MDEV-40362)
Updated packages:
  • cl-MariaDB-meta-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:2f0f8d68063b7fb408cef78f0952f05cdfd45ab7d44b6833de42a562e6b30ea2
  • cl-MariaDB-meta-client-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:6c120319bb8619d080464e6f9bb7db2ea9301170080dd7e5941fe608b9912997
  • cl-MariaDB-meta-devel-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:388a39f78b29d3cda257e7e14346e286a0555ecaccc4bed3a70724f54ccd8941
  • cl-MariaDB106-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:073246bc562b3835e47460227f3412a6f038d3fd1edb31c7e59b69e1b21b66e2
  • cl-MariaDB106-connect-engine-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:f7bc4a135053ff4dbe955601485c4ee8813b5b77615fcdd9c03b31ac948f82e5
  • cl-MariaDB106-devel-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:c883a9f228e4200becddc76e1b50624d52c4159019aba334c517f76319383cde
  • cl-MariaDB106-gssapi-server-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:4c17538689e7ff7994ee13b827668ed848b21dfb053d79c47f6b22fd5c5b0d7f
  • cl-MariaDB106-libs-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:a3158fce6894a454fcca5d572aaa6adb031b3326dc3446804c78e63c53d96e69
  • cl-MariaDB106-rocksdb-engine-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:1d9d85c536dafeb58f1842bd0181e8888860d67719b5b17db58810597fd8d4de
  • cl-MariaDB106-s3-engine-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:06e7e44863f910ed074d98fb9b6d1902290eb5d49b4102a93229ce9352565fe8
  • cl-MariaDB106-server-10.6.20-1.el7.tuxcare.els5.x86_64.rpm
    sha:b64971816389b4f4d699911692f2a689bbbbc1b6911f4047b41c441a332416d1
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.