# CVE-2024-5535 patch status?

**URL:** <https://forums.percona.com/t/cve-2024-5535-patch-status/37387>\
**Category:** Percona XtraDB Cluster\
**Created:** [March 27, 2025, 12:09pm UTC](https://forums.percona.com/t/cve-2024-5535-patch-status/37387 "2025-03-27T12:09:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![tvfan2014](https://avatars.discourse-cdn.com/v4/letter/t/74df32/32.png) [@tvfan2014](https://forums.percona.com/u/tvfan2014)\
**Post date:** [March 27, 2025, 12:09pm UTC](https://forums.percona.com/t/cve-2024-5535-patch-status/37387/1 "2025-03-27T12:09:17Z")

</div>

Hi, I was wondering if someone from Percona side can confirm whether the CVE-2024-5535 has been addressed in Percona XtraDB and if so, which minor version has it, I cannot seem to locate info about it in the release notes.

This is the vulnerability, btw

> **[Vulnerabilities](https://openssl-library.org/news/vulnerabilities/index.html)**

---

<div class="post-metadata">

**Author:** ![anil.joshi](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/anil.joshi/32/13100_2.png) [@anil.joshi](https://forums.percona.com/u/anil.joshi)\
**Post date:** [April 5, 2025, 7:55am UTC](https://forums.percona.com/t/cve-2024-5535-patch-status/37387/2 "2025-04-05T07:55:19Z")

</div>

@tvfan2014 Looking over the jira - [Jira](https://perconadev.atlassian.net/browse/PXC-4563) , the vulnerability you talking about seems to be addressed in **8.0.40/8.4.3** - [Oracle Critical Patch Update Advisory - October 2024](https://www.oracle.com/security-alerts/cpuoct2024.html)

Although in the PXC release notes of same versions I don’t see any update about this. I’ll cross validate it and let you know.

---

<div class="post-metadata">

**Author:** ![anil.joshi](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/anil.joshi/32/13100_2.png) [@anil.joshi](https://forums.percona.com/u/anil.joshi)\
**Post date:** [April 7, 2025, 1:52pm UTC](https://forums.percona.com/t/cve-2024-5535-patch-status/37387/3 "2025-04-07T13:52:23Z")

</div>

Hi, I confirmed within the team so the mentioned fix [CVE-2024-5535] should be applies in Percona MySQL/PXC as well.
