[CLSA-2026:1793300385] Fix of 10 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-10-29 19:00:06 UTC
Description:
* SECURITY UPDATE: Prevent stale DML null state - debian/patches/CVE-2025-53053.patch: Stops stale null state. After a failed functional-index INSERT, stale state can remain. A later UPDATE could assert and crash mysqld. - CVE-2025-53053 * SECURITY UPDATE: CTE table-count denial of service - debian/patches/CVE-2026-21941_CVE-2026-21948.patch: validate the table count during the parser contextualize phase, so queries with excessive table references are rejected early instead of consuming CPU in the resolver (upstream Bug#38573285, commit b56c64b2, first released in 9.6.0 — matching the published affected range 9.0.0-9.5.0; Server: Optimizer). This restores the MAX_TABLES guard that was dropped from CVE-2026-21929.patch in els9, now carried under the two CVE ids upstream attributes it to. - CVE-2026-21941 - CVE-2026-21948 * SECURITY UPDATE: virtual-index corruption follow-up - debian/patches/CVE-2025-53054.patch: fold in upstream Bug#39165747 (commit 5972b9d0891e) so the debug-only validate_for_index() assertion is skipped for non-versioned ROW_FORMAT=REDUNDANT redo replay, where recovery reconstructs only a minimal index descriptor. Without it mysqld-debug could abort during crash recovery on a record the replay handles correctly. - CVE-2025-53054
CVEs fixed:
Updated packages:
  • libmysql9.4client-dev_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:120cf13a3895a1febf11dede049afe7155dd66af
  • libmysql9.4client24_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:1df01ac210a8f5558617bd20476ee9580c352324
  • mysql9.4-client_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:86238a046d2d888a824715f518255c233353072c
  • mysql9.4-common_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:32d041e400f12eb349deb34aeb9d1890f5b6740a
  • mysql9.4-community-client_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:d08792ce166b7c79e2f1cba4213a87ec9321e1a8
  • mysql9.4-community-client-core_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:84dadedc588640fe898b06a6df5ff60662d36248
  • mysql9.4-community-client-plugins_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:9e63d2bd554f416a0cf4bbf74b9d51a3a30ae5db
  • mysql9.4-community-server_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:e5c0cd192a79ba79f75f19b7303be3b23e43a611
  • mysql9.4-community-server-core_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:00594978915363f2e2bcfe9aa702b43c702b94b8
  • mysql9.4-community-server-debug_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:9edfcd863af0a54e1210c99fbfaa7e2cf1eb13ae
  • mysql9.4-community-test_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:dcd73df19278f8a703decdd06b2bbf987f33b3b6
  • mysql9.4-community-test-debug_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:c88d8802a73a05c558dd90e6cd2ec373161f9c5a
  • mysql9.4-router_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:3071a90308094bab18031df7300e16a50979fb5a
  • mysql9.4-router-community_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:4403c73c9876b469ff2b426293a04e4efe0b5398
  • mysql9.4-server_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:28a7fe61bb89daea93fda393ce7fe6f6fd4d2aae
  • mysql9.4-testsuite_9.4.0-1debian13+tuxcare.els10_amd64.deb
    sha:0c20b15662d7fce9883eeb7c5b17113bc498cd2d
  • libmysql9.4client-dev_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:cfa9d33cbe14537a1b11fecec0c09403a779cb92
  • libmysql9.4client24_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:de2147e15bfc24ded0950ea1a9e8bf6c56bcba01
  • mysql9.4-client_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:5c797ddc20c12b14eb4c13d96a0dba4b4cf582a8
  • mysql9.4-common_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:bab1d3ff93a97aa674263619e5bcc762ad25e11b
  • mysql9.4-community-client_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:56c4bbe481be371cf56e92d74a586a8fc0c1452a
  • mysql9.4-community-client-core_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:e48f0e03ba98ff557d7e55d7eb873cc4d6dbbf89
  • mysql9.4-community-client-plugins_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:4fc2dbc520277f25ff26da5ac2918046711e4ae2
  • mysql9.4-community-server_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:aa98c1d9ec9d54b28181845ee2ee5e3d4053e931
  • mysql9.4-community-server-core_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:79d669414dd72157b3f315181a83dfd1e847a912
  • mysql9.4-community-server-debug_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:d1f6756854f0b73ebc9c96d927bbf9ddfb355bbc
  • mysql9.4-community-test_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:c353a0760f4c8989999f2fc528c4059c0a3b2d26
  • mysql9.4-community-test-debug_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:7dc596207c5da6f821899a57bdfb6e2895569c09
  • mysql9.4-router_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:5a72a639ea31f242dd0edc17f38a90feb1abba1f
  • mysql9.4-router-community_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:6b3a9bcc661ba7d931efb814f7c2f016b6cd3c0a
  • mysql9.4-server_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:1eef88c9d162431d032647a0e76839a47eef38c5
  • mysql9.4-testsuite_9.4.0-1debian13+tuxcare.els10_arm64.deb
    sha:1870e372e89379de1ba7ebe6b9ba87e101cbcc42
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.