Release date:
2026-10-02 17:47:16 UTC
Description:
* SECURITY UPDATE: unauthenticated XCom client_msg injection in Group
Replication
- debian/patches/CVE-2026-60163.patch: reject application, transaction,
view and other cargo types received on an external XCom client
connection in acceptor_learner_task(), xcom_base.cc (upstream
BUG#39234600).
- CVE-2026-60163
* SECURITY UPDATE: applier privilege-check bypass via client BINLOG
- debian/patches/CVE-2026-61094.patch: decide whether the applier
privilege checks apply from whether the Relay_log_info belongs to a
client, not from the BINLOG payload length (>= 2048 bytes skipped
them), in Applier_security_context_guard, sql/rpl_rli.cc (upstream
Bug#39474825).
- CVE-2026-61094
Updated packages:
-
libperconaserverclient21_8.0.46-37-1.jammy+tuxcare.els2_amd64.deb
sha:3924bb19533256b45e6378ba89ae62ec03c7e934
-
libperconaserverclient21-dev_8.0.46-37-1.jammy+tuxcare.els2_amd64.deb
sha:de863f45bc659af4827e6e90e73c61935090cb15
-
percona-mysql-router_8.0.46-37-1.jammy+tuxcare.els2_amd64.deb
sha:f450e16d10bf6ed80e2ecf521296e6c522f459fe
-
percona-server-client_8.0.46-37-1.jammy+tuxcare.els2_amd64.deb
sha:5f093c31fb77c2aeac96eea5eef3217ddc8e5b67
-
percona-server-common_8.0.46-37-1.jammy+tuxcare.els2_amd64.deb
sha:1d29c9a051e5e7048bc3004cd5890b06ba865178
-
percona-server-rocksdb_8.0.46-37-1.jammy+tuxcare.els2_amd64.deb
sha:7be8d4febb7b15dfae40cff4d0b41b53bc28d0f1
-
percona-server-server_8.0.46-37-1.jammy+tuxcare.els2_amd64.deb
sha:1bab679f1e50100ed79c7744ed8586bd48265d70
-
percona-server-source_8.0.46-37-1.jammy+tuxcare.els2_amd64.deb
sha:8e9a80f2cd25fb9d98a3a2a2064662c1fa64caea
-
percona-server-test_8.0.46-37-1.jammy+tuxcare.els2_amd64.deb
sha:7493f2d475895ffb08e832976e1ed764df5da301
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
