[CLSA-2026:1787149507] Fix CVE(s): CVE-2024-21096, CVE-2025-30722
Type:
security
Severity:
Moderate
Release date:
2026-08-19 14:25:20 UTC
Description:
* SECURITY UPDATE: missing string escaping in mysqldump get_view_structure - debian/patches/CVE-2025-30722.patch: Adds mysql_real_escape_string_quote() escaping for the table and database name parameters before interpolating them into the WHERE clause of an information_schema.views query inside get_view_structure(), preventing SQL injection through unescaped view identifiers. - CVE-2025-30722 * SECURITY UPDATE: server version parsing in mysqldump client - debian/patches/CVE-2024-21096.patch: mysqldump called mysql_get_server_info() directly without sanitizing the result, allowing a privileged attacker to exploit the client by injecting arbitrary content through the server version string. The fix introduces get_safe_server_info() which validates and normalizes the server version string before embedding it in dump headers. - CVE-2024-21096
CVEs fixed:
Updated packages:
  • libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:10caf7f1c4c4ba164c0e200650df0ac5cff136a1
  • libmysql5.7client20_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:59f6dc833498794f7d001c7002bad968b3e09348
  • libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:a8f55fbec373e55dc1445b49485e26cba4deda11
  • mysql5.7-client_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:b2d897c6c43e4870ab429e68bf79a0401d22a9fc
  • mysql5.7-common_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:e473c684fd587f5f693462c18617e7cefcaed1fb
  • mysql5.7-community-client_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:9a8cdac0cf9d807e9cbc5129daf9ac07de0b825c
  • mysql5.7-community-server_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:e0d518c27e5f754d0c8bad88f88bd447fcbdd94d
  • mysql5.7-community-source_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:f7f65a24d5d0962b781b46998f6bbd1b4feecbea
  • mysql5.7-community-test_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:c5783c9ad87a6a3dc182b9bd7084af70ef206354
  • mysql5.7-server_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:bccb7bf78f25838e4d68266614bc7da0afc61993
  • mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els8_amd64.deb
    sha:1bb02ea462a4eee9d731a8efc38fbbe1d578bc9e
  • libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:c59477f6457b26d3bc8f4505fc3447372657f808
  • libmysql5.7client20_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:9d436f139fb10d42fe8acbcd0360844d4a49388e
  • libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:edf289f5f2921e4d342be9b40b7128e4235c6b50
  • mysql5.7-client_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:cc17bf49b87a9b83350708d5cef905d748502a5c
  • mysql5.7-common_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:7593b1b9a65c2b33d5e5b5b3a1265614d61a603e
  • mysql5.7-community-client_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:6e4544a1012b3f222d9e8d51e72306848c931925
  • mysql5.7-community-server_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:45d6f3ead2f237484f31cbe6a3b272ee9d6bd572
  • mysql5.7-community-source_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:c852657098c0d1ec2e4c73f8f594b42fd0c92685
  • mysql5.7-community-test_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:ac438e7d76661401993bc08893c1f03ebaa567bc
  • mysql5.7-server_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:071ef3324df82b2e05f26ac834812c2c503fd018
  • mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els8_arm64.deb
    sha:910dfba7c77c7c72a5ec79b38416df4d6319753d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.