[CLSA-2026:1790333793] Fix of 30 CVEs
Type:
security
Severity:
None
Release date:
2026-09-25 10:56:42 UTC
Description:
* SECURITY UPDATE: out-of-bounds read during connection attribute parsing - debian/patches/CVE-2026-46863.patch: require the whole length-encoded size field to be present before reading it in read_client_connect_attrs() in sql/auth/sql_authentication.cc. - CVE-2026-46863 * SECURITY UPDATE: MySQL Router crash on repeated X Protocol TLS upgrade - debian/patches/CVE-2026-46862.patch: ignore a CON_CAPABILITIES_SET request that turns TLS on when the client channel already has it, in router/src/routing/src/x_connection.cc. - CVE-2026-46862 * SECURITY UPDATE: fixes carried by the Percona Server 8.0.46-37 source this package is built from, with no TuxCare patch of their own; the same set the el7 8.0.46-37.tuxcare.els1 entry names - CVE-2026-21936, CVE-2026-21937, CVE-2026-21941, CVE-2026-21948, CVE-2026-21964, CVE-2026-21968, CVE-2026-21998, CVE-2026-22001, CVE-2026-22002, CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017, CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278, CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236, CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240 * Build the Percona telemetry component off and stop packaging it, dropping the percona-telemetry-agent dependency: that agent is a separate source package we do not ship, and it made percona-server-server uninstallable.
Updated packages:
  • libperconaserverclient21_8.0.46-37-1.jammy+tuxcare.els1_amd64.deb
    sha:cb1b0a38b5a8318c2ea95dd907e426006e242ca5
  • libperconaserverclient21-dev_8.0.46-37-1.jammy+tuxcare.els1_amd64.deb
    sha:c6cb437df0a16799c2655b302a041f8e6c3c8488
  • percona-mysql-router_8.0.46-37-1.jammy+tuxcare.els1_amd64.deb
    sha:9c23ad92416eaf8bd7b2250898744b98c028a134
  • percona-server-client_8.0.46-37-1.jammy+tuxcare.els1_amd64.deb
    sha:d735a93645cd24468514467950779ff912b898ad
  • percona-server-common_8.0.46-37-1.jammy+tuxcare.els1_amd64.deb
    sha:17de33c0d6a53c9b0b1845354618610931ab2501
  • percona-server-rocksdb_8.0.46-37-1.jammy+tuxcare.els1_amd64.deb
    sha:5aeba925f0f085df9b93c62756d05b1c45d3a5c0
  • percona-server-server_8.0.46-37-1.jammy+tuxcare.els1_amd64.deb
    sha:a54b47aac17a68416cab1bf48a424748a66b9fba
  • percona-server-source_8.0.46-37-1.jammy+tuxcare.els1_amd64.deb
    sha:e12440bbc86cdf9c6b9765147839fcfce23adc46
  • percona-server-test_8.0.46-37-1.jammy+tuxcare.els1_amd64.deb
    sha:987df016f7ddbe22be6105ab1df1f74d05f8b643
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.