[CLSA-2026:1793967711] Fix CVE(s): CVE-2026-34278, CVE-2026-60725
Type:
security
Severity:
Important
Release date:
2026-11-06 12:22:07 UTC
Description:
* SECURITY UPDATE: Prevent parser stack exhaustion - debian/patches/CVE-2026-34278.patch: Adds stack-overrun guards. Deep nesting then errors instead of crashing. - CVE-2026-34278 * SECURITY UPDATE: Router request-body buffering denial of service - debian/patches/CVE-2026-60314.patch: Cap request-body buffering. - CVE-2026-60314 * SECURITY UPDATE: MRS OAuth2 authorization bypass - debian/patches/CVE-2026-60725.patch: Blocks direct-token login. - CVE-2026-60725
CVEs fixed:
Updated packages:
  • libmysql9.3client-dev_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:c18f6255524fdfe509ea4f65c2374ca6e13a9c57
  • libmysql9.3client24_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:8bd685d3d83d1278085e89f6b94f99a69b3026a6
  • mysql9.3-client_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:b29f52835daa8e65164351c9f5f680cb0639f844
  • mysql9.3-common_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:6a86cfa475f868c626c104a3b767d05eabb8306f
  • mysql9.3-community-client_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:b5bd730a8f993a3e086eb602f90c910187785664
  • mysql9.3-community-client-core_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:adb51a59e242abe259e10f24f3cbe4a7ef242538
  • mysql9.3-community-client-plugins_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:40d31f299e41e6cc93be5c5ee458ba6ebb1b9bd3
  • mysql9.3-community-server_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:c70cf742d9dae18d9444ed790a8331d60572e505
  • mysql9.3-community-server-core_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:f19a173f06c08729c24dadaa41ea80aa197dafb2
  • mysql9.3-community-server-debug_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:10c3156f9cfd45ea6183eaf1f479742040c6d7d2
  • mysql9.3-community-test_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:3002abb7843a48fe62457834507aedeb22df728b
  • mysql9.3-community-test-debug_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:b6514d3600fb2e5706ff35f200d9e2e1042952c2
  • mysql9.3-router_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:ef67c1493831bbc03d71d15a6acf46d7a656cbe4
  • mysql9.3-router-community_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:689c921338f7b1b7e970a82e0e073a8a04efb595
  • mysql9.3-server_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:50804243f224a70a1879fcf93b817ec3c9e61e8a
  • mysql9.3-testsuite_9.3.0-1debian12+tuxcare.els19_amd64.deb
    sha:50886b64e8808f3b4f130d0a7e322ba8edf2e1ab
  • libmysql9.3client-dev_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:9d6b2e5f6e4f2e0603847182a770a669e66a2d7d
  • libmysql9.3client24_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:61ae196c422490f89f5b03b29641f385eeb75848
  • mysql9.3-client_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:f2e5809693ed9022e7ff25413d0d1c498e1e4201
  • mysql9.3-common_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:e3b03332dfec34a373633ff4acc140f7f10da558
  • mysql9.3-community-client_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:6faaa687e6f908231b74ed7158f8d9a8ca197ee0
  • mysql9.3-community-client-core_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:eba84b451d1abb359f63b2c3d258bc43ac1ab14a
  • mysql9.3-community-client-plugins_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:359be72a1a1db4d9fc96d4704b128fd66f335e7b
  • mysql9.3-community-server_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:d2f85db7a51e926caf4e6413cedb694ddec3ac4b
  • mysql9.3-community-server-core_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:cb81a2b9b6637b644dbde42b83eb99e4c1c6dca0
  • mysql9.3-community-server-debug_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:97e6cc2781be8ff8e3ee1a620aac6f2d09a5c3d1
  • mysql9.3-community-test_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:d0c19d1271eedf709270b862796c65d0023a612d
  • mysql9.3-community-test-debug_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:a7385e6968340c9bb37dea874121572fb0b083ec
  • mysql9.3-router_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:d223a738770cfdc3cf2f6e8473b9342b5a0914a6
  • mysql9.3-router-community_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:c48bc2719a99e5a1cdf7029346c5e3c1d21eea19
  • mysql9.3-server_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:1065cb6b602fadc8005edd24e88423676eb2e1db
  • mysql9.3-testsuite_9.3.0-1debian12+tuxcare.els19_arm64.deb
    sha:898679a0b73966616613e3ee38ac2309c448d87f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.