[CLSA-2026:1793439341] cl-MariaDB106: Fix of CVE-2026-85985
Type:
security
Severity:
Critical
Release date:
2026-11-03 16:24:25 UTC
Description:
- ELSCVE-243897: Fix CVE-2026-85985 - CONNECT engine JSON/BSON file UDFs skip the FILE privilege and secure_file_priv checks (MDEV-40323)
CVEs fixed:
Updated packages:
  • cl-MariaDB-meta-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:78037e077691f4ed3c6b62b8d4113794357d56ae525e984f7434594594dafdd9
  • cl-MariaDB-meta-client-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:8cf66205a16a2e6742633383919d7653339d11e524d7f40533e8d99ed78e34e8
  • cl-MariaDB-meta-devel-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:04d652c44e77575fe3bb138974fb731b0ff98d232d91bb3b13f02c3ac9e0a0e3
  • cl-MariaDB106-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:3d132e1d1763dcdb8568b0a47945d8dbf72cbe974d7b287fbed1c82d039f4736
  • cl-MariaDB106-connect-engine-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:410b7bc692e2ae342474fe214d175f2de3055aab41cdb4cc59f797dda2ae5a34
  • cl-MariaDB106-devel-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:f891eead24fb088b13889f3a735fa9ec53db6ccbd77b75c3ee84929594f005a8
  • cl-MariaDB106-gssapi-server-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:c6fe57b5f1955dcae323de3e7cfd12065bcc0a57c043c1e49b9c39e777b78e8c
  • cl-MariaDB106-libs-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:bc53fe06a55639f95cc1494b3c12003cee18d2d71fe69dc92fb38ca07441f64f
  • cl-MariaDB106-rocksdb-engine-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:7c41b05fe5057575eeb553b833ffcd4aa2e8a084f1ec706f957fc91b868bddbf
  • cl-MariaDB106-s3-engine-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:c4e3e4d40e9b513dbe8c1dde66c938d4e4855dd524b047757b54dd304c76c4d0
  • cl-MariaDB106-server-10.6.20-1.el7.tuxcare.els6.x86_64.rpm
    sha:f398a9a1484faec90d10b7d76bbd0a489954778b98b346aff0c574655e826b91
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.