[CLSA-2026:1794243268] Fix of 7 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-11-09 16:54:45 UTC
Description:
* SECURITY UPDATE: apr2024 Server: Optimizer pool coverage - debian/patches/CVE-2024-20998_CVE-2024-21008_CVE-2024-21009_CVE-2024-21013_CVE-2024-21054_CVE-2024-21062.patch: backports the two apr2024-window optimizer fixes that apply to 5.7 - Bug#35904044 (Item_subselect::fix_fields overwrote the substituted item's name with an unset name, sending wrong column metadata to the client) and Bug#35854362 (QUICK_RANGE_SELECT::get_next_prefix did not reset the handler end-range before reading the next prefix, so a group-by loose index scan could stop early and return incorrect results). Every other fix of that pool targets code absent from 5.7, so the pool is fully covered for the CVEs below. - CVE-2024-20998 - CVE-2024-21008 - CVE-2024-21009 - CVE-2024-21013 - CVE-2024-21054 - CVE-2024-21062 * SECURITY UPDATE: missing error check while resolving HAVING references - debian/patches/CVE-2024-20975.patch: resolve_ref_in_select_and_group() continued resolving after find_field_in_group_list() raised ER_NON_UNIQ_ERROR, leaving the statement in an error state that the resolver later asserts against. The patch returns as soon as the error is raised. - CVE-2024-20975
CVEs fixed:
Updated packages:
  • libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:b2a13d0640b6526b094ffcbe3e94a3b5adc3117d
  • libmysql5.7client20_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:4a4a1bbd4f1b507cc55f8711ed9dd1a8af253b1c
  • libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:1ac1ed45b850524e163c2e7ec75e6d1fe28037f9
  • mysql5.7-client_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:f358ad549954c7cebfbf8a9876cf53f9f3b522db
  • mysql5.7-common_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:e3928049c879d41a75840f051b477f2a1a9ddd6c
  • mysql5.7-community-client_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:9d70a7e9e9edbc8ec98e41addee87684334ae46d
  • mysql5.7-community-server_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:e2310afe9eaaba0e68082c8bd9da65ffc310f9fb
  • mysql5.7-community-source_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:5dfe4300883a673e0e284896aa2371bf712e6e4f
  • mysql5.7-community-test_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:f11c0bfdd358b3f06ff34ee049178753a431252c
  • mysql5.7-server_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:aa57863bcb679183eb30ed7a5144b71cea537de1
  • mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els17_amd64.deb
    sha:068e0ceb6ef6d4bf64e30c502696ce103069f121
  • libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:a6d37ebf45d35742facde148c96f98beda98c972
  • libmysql5.7client20_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:36aadc4d89c067e32f9022ffe1ec194e3f608bfa
  • libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:9d6dcbbc6621ab5feafaacc998477cf9e439f364
  • mysql5.7-client_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:5bdef91c93ff3b7e7c17955709300e729d79ffcc
  • mysql5.7-common_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:d34ebd61a1bdd1b8bd5d2c1e399f32632e7a50d8
  • mysql5.7-community-client_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:c897770857e0f0dbc43a694b51082b9917d35b94
  • mysql5.7-community-server_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:68cc9ba8da2cb91b5c75a95a8fcb6a699c6d9543
  • mysql5.7-community-source_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:93139d8ff7cd90123fdad9490139366b6d96d708
  • mysql5.7-community-test_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:66ef4dfdb08a4bbefeea680c8510fea44034dd05
  • mysql5.7-server_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:018fa30c9e93f34e737f2e137b49900ff6db58ec
  • mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els17_arm64.deb
    sha:52b3e1b202c4dee2e14a6ad6318d43d57399405e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.