Release date:
2026-10-19 11:36:31 UTC
Description:
* SECURITY UPDATE: heap-buffer-overflow at Multisource_info::get_mi
- debian/patches/CVE-2025-30681.patch: Use c_ptr_safe() instead of ptr()
when extracting the channel-name argument in Item_master_pos_wait::val_int
(sql/item_func.cc). With a MASTER_POS_WAIT/SOURCE_POS_WAIT channel
argument produced by a function returning a text result (e.g. a JSON
function), the string was not null-terminated within its allocated space,
leading to an out-of-bounds read in channel_map.get_mi().
- CVE-2025-30681
Updated packages:
-
libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:c7ce6653a61f9fe4194d4e7c740a5f21742f00b6
-
libmysql5.7client20_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:6318e9ac1f157f3f330997d318435cce1ba107e1
-
libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:14d660199ffc3c54363ca99c33e535f523c59b47
-
mysql5.7-client_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:53cbaa701b29755e71d9150f629baa52a24a4ff9
-
mysql5.7-common_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:2f01e2cb055518db03163b0e309d0b5192262fea
-
mysql5.7-community-client_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:abe579425bd4d3f9bafffd8eb7b4c3b4147fe283
-
mysql5.7-community-server_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:32bdc68a30c5974debd58d1315348998b7a9b395
-
mysql5.7-community-source_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:15a42a63ec6c3e7362fcce9a926b5c185a90583d
-
mysql5.7-community-test_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:6742eee4a382c5837b61f8110ffd6c050207dd9d
-
mysql5.7-server_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:461733d308075a2a36bae82e8183f5e25cae2c01
-
mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els14_amd64.deb
sha:2c4820e53d243aaf739a6ae8a2922e5aa9fdb96b
-
libmysql5.7client-dev_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:a61fe291356a8b879baa8043388494d44235d1ca
-
libmysql5.7client20_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:4f090ebad5241a9eeeda131dff82cef47607bb93
-
libmysql5.7d-dev_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:e3f52b9f0d831a1e3388af2ef2a9a815488abd29
-
mysql5.7-client_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:15d3a033d8af3e7b8a6c41013be2607e4f89c60a
-
mysql5.7-common_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:f5a32ada0f869692a6da119b97e27edf136ea91b
-
mysql5.7-community-client_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:3f701f8d2d9596a45b8eb66f591f04e81350d3ee
-
mysql5.7-community-server_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:80393c213a79561b8826c152a3d86b2438fe0d14
-
mysql5.7-community-source_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:e9121cc794f96b3b1716bfb1cb1323ce4c6e3752
-
mysql5.7-community-test_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:2daf2eae2eaa38c60b33af2fd60e68ef4767b845
-
mysql5.7-server_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:117c5fa46453db6825ea41645440932630bc0cb4
-
mysql5.7-testsuite_5.7.44-1debian10+tuxcare.els14_arm64.deb
sha:4d8a8484f96bbb31f41272f3f4fb708049c46ad6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
