Release date:
2026-10-12 14:14:50 UTC
Description:
* SECURITY UPDATE: Group Replication malformed payload decoding
- debian/patches/CVE-2026-60186.patch: check buffer bounds and item lengths
when decoding Group Replication plugin messages (upstream Bug#39253416).
- CVE-2026-60186
* SECURITY UPDATE: multiple replication event validation issues
- debian/patches/CVE-2026-47023-60184-60185-60187-60188-60189-60190-60191-60331-60585-60747.patch:
validate fake Rotate events, replication metadata, directly queued
events, DECIMAL user variable metadata, rows event width, table map
metadata, packed row values, GTID interval payloads, heartbeat events
and event types on the receiver thread; fix a commit-order GTID state
race, ALTER USER with an empty password replicating incorrectly and
applier error handling while preparing a transaction context
(upstream Bug#39253359, Bug#39253383, Bug#39254914, Bug#39254885,
Bug#39282350, Bug#39254867, Bug#39319907, Bug#39253491, Bug#39259437,
Bug#39377010, Bug#39254896, Bug#38478657, Bug#38924622).
- CVE-2026-47023, CVE-2026-60184, CVE-2026-60185, CVE-2026-60187,
CVE-2026-60188, CVE-2026-60189, CVE-2026-60190, CVE-2026-60191,
CVE-2026-60331, CVE-2026-60585, CVE-2026-60747
Updated packages:
-
libperconaserverclient21_8.0.46-37-1.noble+tuxcare.els4_amd64.deb
sha:0caa549e9899f0b54d62f321e57ef4fe123d7fcf
-
libperconaserverclient21-dev_8.0.46-37-1.noble+tuxcare.els4_amd64.deb
sha:ebc702c04ff81779d77a8f011715e2f2d1036c17
-
percona-mysql-router_8.0.46-37-1.noble+tuxcare.els4_amd64.deb
sha:7c41d2d509a6943612d5043003acc5909142d0b0
-
percona-server-client_8.0.46-37-1.noble+tuxcare.els4_amd64.deb
sha:11de7cc8a489afe5791dece75a74e5fd13401b05
-
percona-server-common_8.0.46-37-1.noble+tuxcare.els4_amd64.deb
sha:8e7f9e6770dd7925bfffc70f02fd6c296a231e6a
-
percona-server-rocksdb_8.0.46-37-1.noble+tuxcare.els4_amd64.deb
sha:6f14ee0a43575adc682c7fb6beaeddeb577ecaa0
-
percona-server-server_8.0.46-37-1.noble+tuxcare.els4_amd64.deb
sha:164673531d50cf6646741404a523a018b45ea23d
-
percona-server-source_8.0.46-37-1.noble+tuxcare.els4_amd64.deb
sha:6e9d909158eab00f9361fb40a0ae2c134a6fafe9
-
percona-server-test_8.0.46-37-1.noble+tuxcare.els4_amd64.deb
sha:90d6a4542318256f63c197b349b2e8b75dd1485b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
