[CLSA-2026:1793300087] Fix of 10 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-10-29 18:55:10 UTC
Description:
* SECURITY UPDATE: Prevent stale DML null state - debian/patches/CVE-2025-53053.patch: Stops stale null state. After a failed functional-index INSERT, stale state can remain. A later UPDATE could assert and crash mysqld. - CVE-2025-53053 * SECURITY UPDATE: CTE table-count denial of service - debian/patches/CVE-2026-21941_CVE-2026-21948.patch: validate the table count during the parser contextualize phase, so queries with excessive table references are rejected early instead of consuming CPU in the resolver (upstream Bug#38573285, commit b56c64b2, first released in 9.6.0 — matching the published affected range 9.0.0-9.5.0; Server: Optimizer). This restores the MAX_TABLES guard that was dropped from CVE-2026-21929.patch in els9, now carried under the two CVE ids upstream attributes it to. - CVE-2026-21941 - CVE-2026-21948 * SECURITY UPDATE: virtual-index corruption follow-up - debian/patches/CVE-2025-53054.patch: fold in upstream Bug#39165747 (commit 5972b9d0891e) so the debug-only validate_for_index() assertion is skipped for non-versioned ROW_FORMAT=REDUNDANT redo replay, where recovery reconstructs only a minimal index descriptor. Without it mysqld-debug could abort during crash recovery on a record the replay handles correctly. - CVE-2025-53054
CVEs fixed:
Updated packages:
  • libmysql9.4client-dev_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:8117c36959eeaee1b8f58437d23da8ddaf15640e
  • libmysql9.4client24_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:051a4772420648535be85800f1629029eeafa32c
  • mysql9.4-client_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:b29f457d20df0d7aa4f0346508b83d699be302ea
  • mysql9.4-common_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:f7a5b45ae58b7be1c098f3fff16e683b5b04405a
  • mysql9.4-community-client_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:1ee60892c854a1facb5845d9ea68b3b7514a08c6
  • mysql9.4-community-client-core_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:5df43baf934b4d7ba867d45d821bf3d74a2f1e89
  • mysql9.4-community-client-plugins_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:f308549608d6c9a62fb5040b95194ae50c1c2537
  • mysql9.4-community-server_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:a7c6f10a9da0663f1845958de9e950058c92ac1e
  • mysql9.4-community-server-core_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:abc5b54c56ec0aff4de446e2fd282478bc5f87f8
  • mysql9.4-community-server-debug_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:d7253aefbdcd2af5b1a49ada80dbb53ce862eddf
  • mysql9.4-community-test_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:94eeb1f39ec9a7b9469eb730327c14702eecd8f7
  • mysql9.4-community-test-debug_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:003342a06b9199e0eff224a0edeafdcb1f9c7316
  • mysql9.4-router_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:4c29f6a4bd5441dad9a7246de094fab3ae500965
  • mysql9.4-router-community_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:fdee1fb22e8ef2606793f8d88807aadbc2db1cc1
  • mysql9.4-server_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:2e5a53aa40b33ca646d935ccbffb842048a92219
  • mysql9.4-testsuite_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:73ef7c16a7f34e973aef1cec6208cdd0bdbba613
  • libmysql9.4client-dev_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:efdf749dfbd1ce3a1865abf56e373b5318fbdef5
  • libmysql9.4client24_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:e18d9c376f0e1ec7d62f9c5afaf3b81f394109e3
  • mysql9.4-client_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:183f8db69a262a6914ea26947c4b1e73a1a7f120
  • mysql9.4-common_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:eec1b8079591e7161a3d05f35711b533c2e5492c
  • mysql9.4-community-client_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:be481f31c4d0e4064d8a2a015c8f9c939a5266b3
  • mysql9.4-community-client-core_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:72fbf2624f2fcc1d33f38751c6e944aa7ecc57df
  • mysql9.4-community-client-plugins_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:5c58aa9ffbbaf877bec95fc0a383934a1da258b5
  • mysql9.4-community-server_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:c46e2bf7b325ff69655d0c0d210407268cba11b3
  • mysql9.4-community-server-core_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:49434d7ee9f0e249956732c4b8413e64fe2a474c
  • mysql9.4-community-server-debug_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:d31095b8a46462eab29d07f988667818bf912b67
  • mysql9.4-community-test_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:3ebce1529fbaf06621bbeb4dac002b15e742d7e9
  • mysql9.4-community-test-debug_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:61af9681e438bb47773a8ea52cb2f7d4183a8b49
  • mysql9.4-router_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:e8c448eb2e8d9616c7a100d38132c49dcd4a2ed5
  • mysql9.4-router-community_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:bc3a442c5fe2693e1fb027d878e362a77795ecb8
  • mysql9.4-server_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:93ef159e2dbac2ca2268a1b22ccd67ba30129fa0
  • mysql9.4-testsuite_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:5c9008dcade709096ff5d47b75e009674fb3564b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.