Release date:
2026-10-19 11:31:08 UTC
Description:
* SECURITY UPDATE: heap-buffer-overflow at Multisource_info::get_mi
- debian/patches/CVE-2025-30681.patch: Use c_ptr_safe() instead of ptr()
when extracting the channel-name argument in Item_master_pos_wait::val_int
(sql/item_func.cc). With a MASTER_POS_WAIT/SOURCE_POS_WAIT channel
argument produced by a function returning a text result (e.g. a JSON
function), the string was not null-terminated within its allocated space,
leading to an out-of-bounds read in channel_map.get_mi().
- CVE-2025-30681
Updated packages:
-
libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:573be4896c991959846bb80233e86f850f83a90f
-
libmysql5.7client20_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:306ce6552c0dc632025b0fbb01e76b6d00b055cd
-
libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:be346798d8c0e63f3b1f70b6d58b867664d00aec
-
mysql5.7-client_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:e64972922f2ee347f51708bdd587b402a575d880
-
mysql5.7-common_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:8744ebe979e0b0706948f5ce571bfed61e1e45e8
-
mysql5.7-community-client_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:399ae50553ea9341789ace512810e9125883a35f
-
mysql5.7-community-server_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:f0eae56b31c01453241e76d60ce3f23b9114d9f3
-
mysql5.7-community-source_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:f95dab42c3df6e5e3dc23594c08dc92d1ad83324
-
mysql5.7-community-test_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:2f7023fd17bc522630c0cf2f2863759f0bb1860f
-
mysql5.7-server_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:2244cb994fd613cbd090e6310a27aa30988de980
-
mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:071c0c2d2284998d95fb7827acab034ecbf409e9
-
libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:317fb10befe3993d191245b3c0281f48620c5074
-
libmysql5.7client20_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:86168615c364eb597a8e11a74c8d5a27c30a07ae
-
libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:ae867673a897c84936e989a1df024970ba5da5ad
-
mysql5.7-client_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:ada26a34f86bb727a981abfef582fc01a26a4189
-
mysql5.7-common_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:3d192dce086c3f5075ffc223c27efededac7716d
-
mysql5.7-community-client_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:34178dfc1abd252685a0271f6495fae439fcc2d1
-
mysql5.7-community-server_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:9345ca19af7643092d7e9c1c3925a4b00ea19cfb
-
mysql5.7-community-source_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:a8e479fa8587d86a4bc4ec2fc90c6c5fbb4ee549
-
mysql5.7-community-test_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:14358fe291c5168bb96dce3241c18620637f08e6
-
mysql5.7-server_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:7f658aebbcfd2e98cb8444a4089a6b61dc2d8a4d
-
mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:bb63e939b599270048b9c0ad138ca2786f93ae8b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
