Tuxcare Errata System 0.0.1 5.10 2026-10-12T14:16:58 Ubuntu 24.04 LTS * SECURITY UPDATE: unauthenticated XCom client_msg injection in Group Replication - debian/patches/CVE-2026-60163.patch: reject application, transaction, view and other cargo types received on an external XCom client connection in acceptor_learner_task(), xcom_base.cc (upstream BUG#39234600). - CVE-2026-60163 * SECURITY UPDATE: applier privilege-check bypass via client BINLOG - debian/patches/CVE-2026-61094.patch: decide whether the applier privilege checks apply from whether the Relay_log_info belongs to a client, not from the BINLOG payload length (>= 2048 bytes skipped them), in Applier_security_context_guard, sql/rpl_rli.cc (upstream Bug#39474825). - CVE-2026-61094 Important TuxCare License Agreement CVE-2026-60163 CVE-2026-61094 Ubuntu 24.04 LTS * SECURITY UPDATE: Group Replication malformed payload decoding - debian/patches/CVE-2026-60186.patch: check buffer bounds and item lengths when decoding Group Replication plugin messages (upstream Bug#39253416). - CVE-2026-60186 * SECURITY UPDATE: multiple replication event validation issues - debian/patches/CVE-2026-47023-60184-60185-60187-60188-60189-60190-60191-60331-60585-60747.patch: validate fake Rotate events, replication metadata, directly queued events, DECIMAL user variable metadata, rows event width, table map metadata, packed row values, GTID interval payloads, heartbeat events and event types on the receiver thread; fix a commit-order GTID state race, ALTER USER with an empty password replicating incorrectly and applier error handling while preparing a transaction context (upstream Bug#39253359, Bug#39253383, Bug#39254914, Bug#39254885, Bug#39282350, Bug#39254867, Bug#39319907, Bug#39253491, Bug#39259437, Bug#39377010, Bug#39254896, Bug#38478657, Bug#38924622). - CVE-2026-47023, CVE-2026-60184, CVE-2026-60185, CVE-2026-60187, CVE-2026-60188, CVE-2026-60189, CVE-2026-60190, CVE-2026-60191, CVE-2026-60331, CVE-2026-60585, CVE-2026-60747 Moderate TuxCare License Agreement CVE-2026-60189 CVE-2026-61081 CVE-2026-47023 CVE-2026-60585 CVE-2026-60190 CVE-2026-60183 CVE-2026-60186 CVE-2026-60184 CVE-2026-60182 CVE-2026-47052 CVE-2026-60188 CVE-2026-60191 CVE-2026-60331 CVE-2026-60185 CVE-2026-46936 CVE-2026-47064 CVE-2026-60178 CVE-2026-60177 CVE-2026-60332 CVE-2026-61109 CVE-2026-60145 CVE-2026-47012 CVE-2026-60187 CVE-2026-60747 libperconaserverclient21 libperconaserverclient21-dev percona-mysql-router percona-server-client percona-server-common percona-server-rocksdb percona-server-server percona-server-source percona-server-test amd64 0:8.0.46-37-1.noble+tuxcare.els2 amd64 0:8.0.46-37-1.noble+tuxcare.els4