[CLSA-2026:1792019173] cl-MariaDB106: Fix of 7 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-17 14:57:38 UTC
Description:
- ELSCVE-226277: Fix CVE-2026-107814 - mysql user home set to datadir allows dot-file code execution - ELSCVE-226276: Fix CVE-2026-107815 - CONNECT DOS table one-byte stack OOB write (MDEV-40637) - ELSCVE-226736: Fix CVE-2026-107816 - qc_info OOB read on query containing NUL (MDEV-40670) - ELSCVE-226734: Fix CVE-2026-107817 - mysql_json plugin OOB reads on invalid binary JSON (MDEV-40678) - ELSCVE-226274: Fix CVE-2026-107821 - insufficient validation of frm data when opening a table (MDEV-40571) - ELSCVE-226735: Fix CVE-2026-107822 - role vs user@localhost acl_cache key confusion (MDEV-40541) - ELSCVE-226273: Fix CVE-2026-107823 - ambiguous view frm parsing when username contains newline (MDEV-40484)
CVEs fixed:
Updated packages:
  • cl-MariaDB-meta-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:cf04dda338e8984f7a5bf7ea7cf25bc90a0951100e9e4ee191da95375b683ec0
  • cl-MariaDB-meta-client-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:dd2f4db44710cd05dc333d034e8ad22919e9247a32e0c923e19e58c11affa0de
  • cl-MariaDB-meta-devel-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:650cf27bc798ab004d882a193ecc4c7d43daa1a59fa452e0afa966d6efa8ef1d
  • cl-MariaDB106-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:8453c0ad6b38b6f0479af7e3d8b7efa71b9d30492f0aeae8dfd670ef63d700ad
  • cl-MariaDB106-connect-engine-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:f71a22d0e2892ddb1fe98dd8d72670e4197945278aa8685b032a40169c0e7a56
  • cl-MariaDB106-devel-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:bb5c714a2be45cccf5ded1bda0d2188932b5408991e9db66b79c83f9ab7ef8f3
  • cl-MariaDB106-gssapi-server-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:c5d1b2f64ca791ad5b1849ed99d3dd1d64234ba5602c49e6460224b394414cd3
  • cl-MariaDB106-libs-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:fddfb63b4bee492e4ebb9fada492e2cada8fe3adeb8218e3ab422e8fb1e169aa
  • cl-MariaDB106-rocksdb-engine-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:bcc27d4a549ed9e131214706137db20cef2b1f352d4eea94c2a873edc9f1b939
  • cl-MariaDB106-s3-engine-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:207dfdb59b77494537cab347b88cf23eb9a891c2c609b6292fdf40c05d8bf995
  • cl-MariaDB106-server-10.6.20-1.el7.tuxcare.els4.x86_64.rpm
    sha:ee71a68977b8686633c1ae8042bbfec36cf57b6d7c014e4930024ab3fdbeb62b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.