[CLSA-2026:1793630969] Fix CVE(s): CVE-2024-20963, CVE-2024-21160
Type:
security
Severity:
Moderate
Release date:
2026-11-02 14:49:44 UTC
Description:
* SECURITY UPDATE: FTS cleanup crash during index changes - debian/patches/CVE-2024-21203-v2.patch: When a FULLTEXT index is dropped while another FULLTEXT index is added in the same transaction, cleanup can release FTS resources that are still needed and trigger a server exit. The patch tracks the in-progress FTS addition, avoids last-index cleanup in that case, and removes the compensating flag reset. - CVE-2024-21203 * SECURITY UPDATE: MD5 input length overflow - debian/patches/CVE-2024-20963.patch: The patch changes MD5 digest-length handling from signed int to size_t, preventing truncation when excessive input is processed. This prevents the server from stopping on oversized MD5() input. - CVE-2024-20963 * SECURITY UPDATE: claim CVE-2024-21160 (InnoDB transaction hang) - CVE-2024-21160 is fixed by Bug#35277407 (with Bug#34929814 and Bug#36343647 from the same candidate pool), whose backports are already applied by debian/patches/CVE-2024-21166_CVE-2024-21173_CVE-2024-21179.patch; this entry records the CVE claim explicitly. - CVE-2024-21160
CVEs fixed:
Updated packages:
  • libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:2c9e1f6d1bb5f837fa05b07ed1a14a9d113f36bf
  • libmysql5.7client20_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:fb3dfa04ebe2eb02f13c10dfb9417b24fc14dc09
  • libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:0eaae3eb712c23be307d9d0a58ef5f58c5822d0a
  • mysql5.7-client_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:0cd60469c6fc5404331fa335a5d4b30ab91b74a2
  • mysql5.7-common_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:8965728f7be227273666e89e5f3f6cc09e7498bc
  • mysql5.7-community-client_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:b8df19059248dd790855c9e3dee19ae14517661a
  • mysql5.7-community-server_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:e9084021fe2df7b4f74bcd25875001904ff44b69
  • mysql5.7-community-source_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:8546091acc8166ef3488ccef0b5f6d2116f2d172
  • mysql5.7-community-test_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:59a5577fc9ca9df9754bbb771df65392fce6616d
  • mysql5.7-server_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:90a6dc19ae6df080b5cd0f15f63d260276d92ce6
  • mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:f0b08ceb706fa9a30e16ca220077c48b824bec0a
  • libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:a6afde9e4dcdd92c94f3279b45c1e6e5ce9c456f
  • libmysql5.7client20_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:28faabd4930c217d219a7ee60bc4da5085b6cae9
  • libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:ea3c3e95f56ec54a32a1fee3dfdf670cb8752dca
  • mysql5.7-client_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:366bf386b476b859883452d89876050c626bc2f4
  • mysql5.7-common_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:6649628c7fb974535b97e9307da69a4da315bb3a
  • mysql5.7-community-client_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:144f34dc095d4924d6f19fc47454f8fcb87926a4
  • mysql5.7-community-server_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:0e1f6a93dce134b4016c467cccb1bc10abb1594f
  • mysql5.7-community-source_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:75e7d75467698ec4759741640debbd46fec02c39
  • mysql5.7-community-test_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:d31100f39c449c88fb033f8c108022021dcc6c66
  • mysql5.7-server_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:842c8579876dd79fe184422060395643d9a1f318
  • mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:b113d8f7f0f71e31a46b039e18e19fc60d6a08ef
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.