[CLSA-2026:1793630964] Fix CVE(s): CVE-2024-20963, CVE-2024-21160
Type:
security
Severity:
Moderate
Release date:
2026-11-02 14:49:42 UTC
Description:
* SECURITY UPDATE: FTS cleanup crash during index changes - debian/patches/CVE-2024-21203-v2.patch: When a FULLTEXT index is dropped while another FULLTEXT index is added in the same transaction, cleanup can release FTS resources that are still needed and trigger a server exit. The patch tracks the in-progress FTS addition, avoids last-index cleanup in that case, and removes the compensating flag reset. - CVE-2024-21203 * SECURITY UPDATE: MD5 input length overflow - debian/patches/CVE-2024-20963.patch: The patch changes MD5 digest-length handling from signed int to size_t, preventing truncation when excessive input is processed. This prevents the server from stopping on oversized MD5() input. - CVE-2024-20963 * SECURITY UPDATE: claim CVE-2024-21160 (InnoDB transaction hang) - CVE-2024-21160 is fixed by Bug#35277407 (with Bug#34929814 and Bug#36343647 from the same candidate pool), whose backports are already applied by debian/patches/CVE-2024-21166_CVE-2024-21173_CVE-2024-21179.patch; this entry records the CVE claim explicitly. - CVE-2024-21160
CVEs fixed:
Updated packages:
  • libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:053ff037e1693e5d44d1e625549bd25e5ac7a0b1
  • libmysql5.7client20_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:fccbc84052a20c8a98bdb67116762044ce263ec3
  • libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:cbfecf311747a25dec3aa567c1e51f77955120c9
  • mysql5.7-client_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:899579f0b0eca718449c8ee2e6dcf33584ea6fc1
  • mysql5.7-common_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:4bd33693cc1369039a27316746303b8b56942095
  • mysql5.7-community-client_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:7080c61452aac1fe793e530c3962ce1ce8d14957
  • mysql5.7-community-server_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:2092ce4e3379106b4d14d064b946f62d3fe387bb
  • mysql5.7-community-source_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:88cc0c25d6321c3849215366bcca084bcdcd4961
  • mysql5.7-community-test_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:412b2e7af6ef0fdb3fdb893c07c7482aeffe1806
  • mysql5.7-server_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:7538c2114d36fb74e2810bd753a076e71315f0c3
  • mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els16_amd64.deb
    sha:ba1884b36559c4bf7df6b114ad50bc40f2b3f77a
  • libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:ee6c20a8128a948a0f9f4b7247b05797fd2e02a9
  • libmysql5.7client20_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:a32d1b30ebc1d1558a6f2b9b5404a328e42d2698
  • libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:e85fd6e3a772eb52a5fee2f850ce2e683cada95a
  • mysql5.7-client_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:535c8c56b5a931bae59e0da4d06be5b30b38d2c3
  • mysql5.7-common_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:c143ba6e1b403c22d9f9ee34c42841c418ef1d3a
  • mysql5.7-community-client_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:aff8165de67cb32440a4adfd66e9458623262d03
  • mysql5.7-community-server_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:78cd8e3f661f8da9e8f0ab29fd25850ea17c66dd
  • mysql5.7-community-source_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:c877c4474d2bc3dd4f72a871f6d25e45953b4df8
  • mysql5.7-community-test_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:e64f3bdd95bfb05617cfcb12e032f904bd06b26c
  • mysql5.7-server_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:c4f1a8c15ca8c690b30693372564c9690926382b
  • mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els16_arm64.deb
    sha:2e0e9c0d0b8b380d3f2c7a19286b5dd85e13cef7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.