[CLSA-2026:1785947453] Fix CVE(s): CVE-2024-21193, CVE-2024-21204, CVE-2025-21518, CVE-2025-21531
Type:
security
Severity:
Moderate
Release date:
2026-08-05 16:31:10 UTC
Description:
* SECURITY UPDATE: prepared statement use-after-free in CREATE INDEX/ALTER TABLE - debian/patches/CVE-2024-21193.patch: When an expression is used in the index clause of a CREATE TABLE, CREATE INDEX, or ALTER TABLE ADD INDEX statement within a prepared statement, subsequent executions encounter an error due to use-after-free of MEM_ROOT pointers. The fix forces reprepare/reparse of the affected prepared statements prior to second and subsequent executions. - CVE-2024-21193 * SECURITY UPDATE: crash when repreparing prepared statements repeatedly - debian/patches/CVE-2024-21204.patch: Adds a null check for the reprepare observer in stored-routine execution: when ER_NEED_REPREPARE fires but no observer is set, the function now returns an error instead of hitting an assertion that crashes the server. - CVE-2024-21204
Updated packages:
  • libmysql9.0client-dev_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:a3a8834260c81d246e6bce5e92ab824a85394d92
  • libmysql9.0client24_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:fec41dd380a81838f35dea7c49549a514cde3f0a
  • mysql9.0-client_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:a32d9ddc062a30e1e39f36862407466ae0648c37
  • mysql9.0-common_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:aeeb9feecbe8d39e6ab206c9bc0646098c55cd5b
  • mysql9.0-community-client_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:76c7a7d7557ed3a0d4a5530a413c76def0afffa1
  • mysql9.0-community-client-core_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:5ccae235938b5cdd346d86c9f182ec40f0dcf7f1
  • mysql9.0-community-client-plugins_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:6e0debf196d92f0581449847f931534a61860d3c
  • mysql9.0-community-server_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:788eb18e1b95e237708838cae5975878e83c583a
  • mysql9.0-community-server-core_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:66e7023aa686cf384525ec9cafd2dafa7c369cd8
  • mysql9.0-community-server-debug_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:0347067cc0e4de1baf7e635384369f17fe452b9c
  • mysql9.0-community-test_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:a7c53f23c87b4ed64d1c3b74d2fa26d614a8b142
  • mysql9.0-community-test-debug_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:399d02e69050a83fc3f96a8593c56120bd5ff92a
  • mysql9.0-router_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:f8e40be4781c57486ac7d149b971385dd5b15ace
  • mysql9.0-router-community_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:e19e2fc90c993eb7d8626a1ef97cd56fe6bd1a7a
  • mysql9.0-server_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:479e75f6df646e2c98ddece83e64880fbcfb9016
  • mysql9.0-testsuite_9.0.1-1debian12+tuxcare.els20_amd64.deb
    sha:72a32f18cd7ac8edb049e4d38be3cf29841b472a
  • libmysql9.0client-dev_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:f0dcae045dd556e27392f4d9faf3efb948b3973c
  • libmysql9.0client24_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:553c20050dc22caa8b91ef39426724fce2f1af76
  • mysql9.0-client_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:fe2ac542b0c139ee95a0093c72822c9bede242a2
  • mysql9.0-common_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:99cb3963e077863028da4ce8d0aa73997bcce811
  • mysql9.0-community-client_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:5c3b254721fcd6a1cff85707c7014b18ab769323
  • mysql9.0-community-client-core_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:7d5b012a945ca3095fdde27aff05e8bb052d39a2
  • mysql9.0-community-client-plugins_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:db0791b94b515f724a6fcb1cdd7af86f858e2414
  • mysql9.0-community-server_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:bd510473cccd87c4da28707fc65a10ff6fe5283c
  • mysql9.0-community-server-core_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:4cd03609065cf91b5e6dcf090cd0a50f350800c6
  • mysql9.0-community-server-debug_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:87afc67afefd6fe380010f40721b5dc7a874db43
  • mysql9.0-community-test_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:1f7473d67f3e55521d48b8f92e01234430b5ab09
  • mysql9.0-community-test-debug_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:c7a3a9ba46d22a0c53b1fa2481c2235335c28823
  • mysql9.0-router_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:ee44dd38f03e7c418c72529b5c156bdac2025ca8
  • mysql9.0-router-community_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:286d0b7aa04d9cdf1bebbd4566216bb0c186004e
  • mysql9.0-server_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:0cbdbc44a09a3825381a3f2f5b607701599e4af7
  • mysql9.0-testsuite_9.0.1-1debian12+tuxcare.els20_arm64.deb
    sha:6c9490644f85d70f3e708bdf8079cdfc62a2861f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.