CVE-2024-5535 patch status?

MySQL & MariaDB Percona XtraDB Cluster 8.x
1

Hi, I was wondering if someone from Percona side can confirm whether the CVE-2024-5535 has been addressed in Percona XtraDB and if so, which minor version has it, I cannot seem to locate info about it in the release notes.

This is the vulnerability, btw

2

@tvfan2014 Looking over the jira - Jira , the vulnerability you talking about seems to be addressed in 8.0.40/8.4.3 - Oracle Critical Patch Update Advisory - October 2024

Although in the PXC release notes of same versions I don’t see any update about this. I’ll cross validate it and let you know.

3

Hi, I confirmed within the team so the mentioned fix [CVE-2024-5535] should be applies in Percona MySQL/PXC as well.