[CLSA-2026:1790334104] Fix of 30 CVEs
Type:
security
Severity:
None
Release date:
2026-09-25 11:01:53 UTC
Description:
* SECURITY UPDATE: out-of-bounds read during connection attribute parsing - debian/patches/CVE-2026-46863.patch: require the whole length-encoded size field to be present before reading it in read_client_connect_attrs() in sql/auth/sql_authentication.cc. - CVE-2026-46863 * SECURITY UPDATE: MySQL Router crash on repeated X Protocol TLS upgrade - debian/patches/CVE-2026-46862.patch: ignore a CON_CAPABILITIES_SET request that turns TLS on when the client channel already has it, in router/src/routing/src/x_connection.cc. - CVE-2026-46862 * SECURITY UPDATE: fixes carried by the Percona Server 8.0.46-37 source this package is built from, with no TuxCare patch of their own; the same set the el7 8.0.46-37.tuxcare.els1 entry names - CVE-2026-21936, CVE-2026-21937, CVE-2026-21941, CVE-2026-21948, CVE-2026-21964, CVE-2026-21968, CVE-2026-21998, CVE-2026-22001, CVE-2026-22002, CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017, CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34278, CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-35236, CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240 * Build the Percona telemetry component off and stop packaging it, dropping the percona-telemetry-agent dependency: that agent is a separate source package we do not ship, and it made percona-server-server uninstallable.
Updated packages:
  • libperconaserverclient21_8.0.46-37-1.noble+tuxcare.els1_amd64.deb
    sha:ece6df49101def8468eabaa695e3504c2d6d1cf9
  • libperconaserverclient21-dev_8.0.46-37-1.noble+tuxcare.els1_amd64.deb
    sha:1e43148ae2811dede296e5ceeb961c4e080087c2
  • percona-mysql-router_8.0.46-37-1.noble+tuxcare.els1_amd64.deb
    sha:6faa8b6ec4e6b54ca404ee546032253eef981913
  • percona-server-client_8.0.46-37-1.noble+tuxcare.els1_amd64.deb
    sha:c59f0bec16635424e4eb8e1eef6846b4462d0471
  • percona-server-common_8.0.46-37-1.noble+tuxcare.els1_amd64.deb
    sha:a4ad3029244f640d3c8750df3fd6a262f902afd6
  • percona-server-rocksdb_8.0.46-37-1.noble+tuxcare.els1_amd64.deb
    sha:1f0189c02f89c1bc26ea4b404eec3610d0971178
  • percona-server-server_8.0.46-37-1.noble+tuxcare.els1_amd64.deb
    sha:ca8603afdb15d8840189f862a74bd2a93d78bd3c
  • percona-server-source_8.0.46-37-1.noble+tuxcare.els1_amd64.deb
    sha:b73bdeca2de66ab85c7f8f6630e884c54cdb3344
  • percona-server-test_8.0.46-37-1.noble+tuxcare.els1_amd64.deb
    sha:ee2bfaf9edf85332f746753fd6c7774fd025c783
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.