[CLSA-2026:1787148911] Fix CVE(s): CVE-2024-21096, CVE-2025-30722
Type:
security
Severity:
Moderate
Release date:
2026-08-19 14:15:24 UTC
Description:
* SECURITY UPDATE: missing string escaping in mysqldump get_view_structure - debian/patches/CVE-2025-30722.patch: Adds mysql_real_escape_string_quote() escaping for the table and database name parameters before interpolating them into the WHERE clause of an information_schema.views query inside get_view_structure(), preventing SQL injection through unescaped view identifiers. - CVE-2025-30722 * SECURITY UPDATE: server version parsing in mysqldump client - debian/patches/CVE-2024-21096.patch: mysqldump called mysql_get_server_info() directly without sanitizing the result, allowing a privileged attacker to exploit the client by injecting arbitrary content through the server version string. The fix introduces get_safe_server_info() which validates and normalizes the server version string before embedding it in dump headers. - CVE-2024-21096
CVEs fixed:
Updated packages:
  • libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:1b5851a83edcfaf5ebedb5667ce69f43b45bde01
  • libmysql5.7client20_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:a895d53806eea61a6fe01eb3870fed8e1d2736c1
  • libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:23265275269c84a019632c05d8453a0fc2b1d8cc
  • mysql5.7-client_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:a81ac830b1453e9469b6f98edf8c60c23369b760
  • mysql5.7-common_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:d9389cfa7de34444652390990e76c05c2992baf7
  • mysql5.7-community-client_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:ebfd251e1f1d53619907e2a0af840f400e8c73a0
  • mysql5.7-community-server_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:73779f0dce76d437aabdf8d3483023a8fbe8e0d6
  • mysql5.7-community-source_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:385d35b33898a23d295f021f35d4d05e509946e8
  • mysql5.7-community-test_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:f88619c5567e26b02adc4f486cfd1de88c8bcebb
  • mysql5.7-server_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:a1c081191d7df2a1c88f9f759f111f782e22ce15
  • mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:5e2f5b8a3e85f18c1ce3abea76366df750940362
  • libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:3eb9c2586c445df702b82975cc74914ef79b3e00
  • libmysql5.7client20_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:cbf3284ba0516c557e6bcc267e2c42754671aa65
  • libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:a34864ebd1421cdb0dc16fd28667e3a00c2b36ed
  • mysql5.7-client_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:18587859a9cac98f7f9b0f784873d56461c70ec8
  • mysql5.7-common_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:249d171acb61cd553b8a25d99f6fd0a5d5374187
  • mysql5.7-community-client_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:cc87d8752533c892cb1712a32f1171a34de68b4b
  • mysql5.7-community-server_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:684a498c2097d4cfbcff0342a33ab89874a7be86
  • mysql5.7-community-source_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:37648d3955a296362a3d66919eeadb21dfa11aed
  • mysql5.7-community-test_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:0e26cbe5b3418536ac450c93031495d2278406c7
  • mysql5.7-server_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:61639d84cd59928ec48f74818be653039f17b948
  • mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:96a93bdb5877ebe15ef083d92048de18a4ea5582
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.