{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* SECURITY UPDATE: X Plugin accepts malformed challenge-response payloads\n - debian/patches/CVE-2026-60315.patch: require the client scramble and\n stored hash to have the expected length and format before\n get_salt_from_password() parses them, in\n plugin/x/src/native_verification.cc and\n plugin/x/src/cache_based_verification.cc.\n - CVE-2026-60315\n * SECURITY UPDATE: server hang on a cyclic JSON schema reference\n - debian/patches/CVE-2026-61109.patch: reject cyclic $ref chains when\n validating a JSON schema, in sql/json_schema.cc.\n - CVE-2026-61109\n * SECURITY UPDATE: use-after-free of TABLE::read_set in DynamicRangeIterator\n - debian/patches/CVE-2026-47064.patch: restore the saved read_set\n through a Scope_guard on every exit path of\n IndexSkipScanIterator::Init() and Read(), in\n sql/range_optimizer/index_skip_scan.cc.\n - CVE-2026-47064\n * SECURITY UPDATE: optimizer crash (SEGV) in subquery_to_derived\n - debian/patches/CVE-2026-60145.patch: reference-count the Item_field\n copy made in Query_block::replace_item_in_expression(), so it cannot\n be freed while another occurrence still refers to it, in\n sql/sql_resolver.cc.\n - CVE-2026-60145\n * SECURITY UPDATE: null pointer dereference in the clone apply path\n - debian/patches/CVE-2026-60177.patch: validate the data file index\n before dereferencing it, in storage/innobase/clone/clone0apply.cc.\n - CVE-2026-60177\n * SECURITY UPDATE: failed DDL leaves index builders uncleaned\n - debian/patches/CVE-2026-46936.patch: release all builders when a DDL\n operation fails, in storage/innobase/ddl/ddl0builder.cc.\n - CVE-2026-46936\n * SECURITY UPDATE: clone client can be directed to write to an arbitrary path\n - debian/patches/CVE-2026-60178.patch: validate the donor-supplied\n file path before the clone client writes it, in\n storage/innobase/clone/clone0apply.cc.\n - CVE-2026-60178\n * SECURITY UPDATE: clone client crash from an unchecked descriptor index\n - debian/patches/CVE-2026-60182.patch: bound-check loc_index in\n Client::set_descriptor() before use, in\n plugin/clone/src/clone_client.cc.\n - CVE-2026-60182\n * SECURITY UPDATE: performance schema exposes raw object instance addresses\n - debian/patches/CVE-2026-61081.patch: derive OBJECT_INSTANCE_BEGIN\n columns instead of exposing raw pointers, in storage/perfschema/.\n - CVE-2026-61081\n * SECURITY UPDATE: InnoDB deadlock from a missed FIL_SHARD release\n - debian/patches/CVE-2026-47052.patch: release the fil shard on the\n error path so concurrent tablespace lookups cannot deadlock under\n load, in storage/innobase/fil/fil0fil.cc.\n - CVE-2026-47052\n * SECURITY UPDATE: donor-controlled dlopen() path traversal during clone plugin validation\n - debian/patches/CVE-2026-60183.patch: validate donor-supplied shared\n object names before dlopen(), in plugin/clone/src/clone_client.cc.\n - CVE-2026-60183\n * SECURITY UPDATE: X Plugin SQL injection with NO_BACKSLASH_ESCAPES\n - debian/patches/CVE-2026-60316.patch: escape string literals according\n to the session's NO_BACKSLASH_ESCAPES mode when building SQL in the X\n Plugin, via the new plugin/x/src/helper/sql_literal_escaping.h and\n query_formatter.cc.\n - CVE-2026-60316\n * SECURITY UPDATE: server crash from a failed CHECK TABLE on a lost connection\n - debian/patches/CVE-2026-47012.patch: handle the network error path\n during CHECK TABLE without dereferencing the released table, in\n sql/sql_admin.cc.\n - CVE-2026-47012", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_percona/ubuntu22.04/advisories/2026/clsa-2026_1792094308.json" } ], "tracking": { "current_release_date": "2026-10-15T20:02:19Z", "generator": { "date": "2026-10-15T20:02:19Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792094308", "initial_release_date": "2026-10-15T20:02:19Z", "revision_history": [ { "date": "2026-10-15T20:02:19Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Fix of 26 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Ubuntu 22.04", "product": { "name": "Ubuntu 22.04", "product_id": "Ubuntu-22", "product_identification_helper": { "cpe": "cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*" } } } ], "category": "product_family", "name": "Ubuntu" } ], "category": "vendor", "name": "Canonical Ltd." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product": { "name": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_id": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-test@8.0.46-37-1.jammy%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product": { "name": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_id": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-rocksdb@8.0.46-37-1.jammy%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product": { "name": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_id": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libperconaserverclient21@8.0.46-37-1.jammy%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product": { "name": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_id": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-source@8.0.46-37-1.jammy%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product": { "name": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_id": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-common@8.0.46-37-1.jammy%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product": { "name": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_id": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-server@8.0.46-37-1.jammy%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product": { "name": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_id": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libperconaserverclient21-dev@8.0.46-37-1.jammy%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product": { "name": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_id": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-mysql-router@8.0.46-37-1.jammy%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product": { "name": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_id": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-client@8.0.46-37-1.jammy%2Btuxcare.els4?arch=amd64" } } }, { "category": "product_version", "name": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product": { "name": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_id": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libperconaserverclient21@8.0.46-37-1.jammy%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product": { "name": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_id": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-source@8.0.46-37-1.jammy%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product": { "name": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_id": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-common@8.0.46-37-1.jammy%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product": { "name": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_id": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-server@8.0.46-37-1.jammy%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product": { "name": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_id": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-client@8.0.46-37-1.jammy%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product": { "name": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_id": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-rocksdb@8.0.46-37-1.jammy%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product": { "name": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_id": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libperconaserverclient21-dev@8.0.46-37-1.jammy%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product": { "name": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_id": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-test@8.0.46-37-1.jammy%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product": { "name": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_id": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-mysql-router@8.0.46-37-1.jammy%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product": { "name": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_id": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-common@8.0.46-37-1.jammy%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product": { "name": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_id": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-client@8.0.46-37-1.jammy%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product": { "name": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_id": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-source@8.0.46-37-1.jammy%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product": { "name": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_id": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-server@8.0.46-37-1.jammy%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product": { "name": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_id": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-test@8.0.46-37-1.jammy%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product": { "name": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_id": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-server-rocksdb@8.0.46-37-1.jammy%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product": { "name": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_id": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libperconaserverclient21@8.0.46-37-1.jammy%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product": { "name": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_id": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/percona-mysql-router@8.0.46-37-1.jammy%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product": { "name": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_id": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libperconaserverclient21-dev@8.0.46-37-1.jammy%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" }, "product_reference": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" }, "product_reference": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" }, "product_reference": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" }, "product_reference": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" }, "product_reference": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" }, "product_reference": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" }, "product_reference": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" }, "product_reference": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" }, "product_reference": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" }, "product_reference": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" }, "product_reference": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" }, "product_reference": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" }, "product_reference": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" }, "product_reference": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" }, "product_reference": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" }, "product_reference": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" }, "product_reference": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" }, "product_reference": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64" }, "product_reference": "percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64" }, "product_reference": "percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64" }, "product_reference": "percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64" }, "product_reference": "percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64" }, "product_reference": "percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64" }, "product_reference": "percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64" }, "product_reference": "libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64" }, "product_reference": "percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" }, { "category": "default_component_of", "full_product_name": { "name": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64 as a component of Ubuntu 22.04", "product_id": "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64" }, "product_reference": "libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-22" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-60189", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60189" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:36Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:36Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-61081", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-61081" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:38:02Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:38:02Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 2.7, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2026-47023", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-47023" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:06Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:06Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60585", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60585" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:36:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:36:00Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60190", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60190" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:37Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:37Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] }, { "cve": "CVE-2026-60183", "cwe": { "id": "CWE-269", "name": "Improper Privilege Management" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60183" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:34Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:34Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60186", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60186" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:35Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:35Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60184", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60184" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:34Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:34Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60182", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60182" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:34Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:34Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60315", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster and unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60315" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:34:24Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:34:24Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-47052", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-47052" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:16Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:16Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60316", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60316" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:34:24Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:34:24Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-60188", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60188" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:36Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:36Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60191", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60191" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:37Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:37Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60331", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60331" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:34:30Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:34:30Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60185", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60185" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:35Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:35Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-46936", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-46936" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:32:48Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:32:48Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-47064", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-47064" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:20Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:20Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60178", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60178" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:32Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:32Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60177", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60177" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:32Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:32Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60332", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60332" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:34:30Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:34:30Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-61109", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-61109" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:38:13Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:38:13Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60145", "cwe": { "id": "CWE-284", "name": "Improper Access Control" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60145" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:21Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:21Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-47012", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-47012" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:02Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:02Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60187", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60187" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:33:36Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:33:36Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-60747", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "known_affected": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-percona/cve/CVE-2026-60747" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2026.html", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" } ], "release_date": "2026-07-21T21:36:47Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-15T19:58:30.365105Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els4.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els4.amd64" ], "url": "https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1792094308" }, { "category": "none_available", "date": "2026-07-21T21:36:47Z", "details": "Affected", "product_ids": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:libperconaserverclient21-dev-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-mysql-router-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-client-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-common-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-rocksdb-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-server-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-source-0:8.0.46-37-1.jammy+tuxcare.els2.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els1.amd64", "Ubuntu-22:percona-server-test-0:8.0.46-37-1.jammy+tuxcare.els2.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }