Percona XtraDB Cluster 8.4.8-8.1 → 9.7.2-2.1
8 releases · 1 breaking change · 20 security fixes · 0 advisories fixed
20security1breaking0deprecated41feature33fix
Breaking changes
- breaking PXC-5195: Removes obsolete configuration variables (wsrep-slave-FK-checks, wsrep-slave-UK-checks, wsrep-causal-reads) from Percona XtraDB Cluster 9.7.1-1. in 9.7.1-1.1
Security changes
- security CVE-2026-46850: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via HTTP to compromise MySQL Shell, with potential scope change impact on additional products (CVSS 3.1 Base Score 9.9). in 9.7.1-1.1
- security CVE-2026-46860: A vulnerability in MySQL Router allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router (CVSS 3.1 Base Score 9.8). in 9.7.1-1.1
- security CVE-2026-46861: A vulnerability in MySQL NDB Cluster (NDB Operator) allows a low-privileged attacker with network access via HTTP to access or modify critical data, with potential scope change impact (CVSS 3.1 Base Score 9.6). in 9.7.1-1.1
- security CVE-2026-46862: A vulnerability in MySQL Router allows an unauthenticated attacker with network access via TLS to cause a hang or repeatable unexpected exit of MySQL Router (CVSS 3.1 Base Score 7.5). in 9.7.1-1.1
- security CVE-2026-46863: A vulnerability in MySQL Server connection handling allows an unauthenticated attacker with network access via multiple protocols to cause a hang or repeatable unexpected exit of the server (CVSS 3.1 Base Score 7.5). in 9.7.1-1.1
- security CVE-2026-46869: A vulnerability in MySQL Shell (Dump and Load) allows an unauthenticated attacker with network access to access critical data when user interaction is required (CVSS 3.1 Base Score 6.5). in 9.7.1-1.1
- security CVE-2026-46870: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access to compromise MySQL Shell, with potential scope change impact (CVSS 3.1 Base Score 8.5). in 9.7.1-1.1
- security CVE-2026-46871: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via multiple protocols to access critical data (CVSS 3.1 Base Score 6.5). in 9.7.1-1.1
- security CVE-2026-48165: A vulnerability in the handling of the wsrep_sst_donor and wsrep_sst_receive_address system variables could allow a highly privileged user to execute arbitrary shell commands with the privileges of the mysqld process during State Snapshot Transfer (SST) due to improper input… in 9.7.1-1.1
- security CVE-2026-49261: A vulnerability in wsrep_notify_cmd could allow a remote attacker to execute arbitrary shell commands by embedding commands in the name of a joining node when wsrep_notify_cmd is enabled due to improper input sanitization (CVSS 3.1 Base Score 10.0). The fix was backported from… in 9.7.1-1.1
- security CVE-2026-46850: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via HTTP to compromise MySQL Shell, with potential scope change impact on additional products (CVSS 3.1 Base Score 9.9). in 8.4.10-10.1
- security CVE-2026-46860: A vulnerability in MySQL Router allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router (CVSS 3.1 Base Score 9.8). in 8.4.10-10.1
- security CVE-2026-46861: A vulnerability in MySQL NDB Cluster (NDB Operator) allows a low-privileged attacker with network access via HTTP to access or modify critical data, with potential scope change impact (CVSS 3.1 Base Score 9.6). in 8.4.10-10.1
- security CVE-2026-46862: A vulnerability in MySQL Router allows an unauthenticated attacker with network access via TLS to cause a hang or repeatable unexpected exit of MySQL Router (CVSS 3.1 Base Score 7.5). in 8.4.10-10.1
- security CVE-2026-46863: A vulnerability in MySQL Server connection handling allows an unauthenticated attacker with network access via multiple protocols to cause a hang or repeatable unexpected exit of the server (CVSS 3.1 Base Score 7.5). in 8.4.10-10.1
- security CVE-2026-46869: A vulnerability in MySQL Shell (Dump and Load) allows an unauthenticated attacker with network access to access critical data when user interaction is required (CVSS 3.1 Base Score 6.5). in 8.4.10-10.1
- security CVE-2026-46870: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access to compromise MySQL Shell, with potential scope change impact (CVSS 3.1 Base Score 8.5). in 8.4.10-10.1
- security CVE-2026-46871: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via multiple protocols to access critical data (CVSS 3.1 Base Score 6.5). in 8.4.10-10.1
- security CVE-2026-48165: A vulnerability in the handling of the wsrep_sst_donor and wsrep_sst_receive_address system variables allowed a high-privileged user to execute arbitrary shell commands with the privileges of the mariadbd process during State Snapshot Transfer (SST) due to improper input… in 8.4.10-10.1
- security CVE-2026-49261: A vulnerability in MariaDB Server with wsrep_notify_cmd enabled allowed a remote attacker to execute arbitrary shell commands by embedding commands in the name of a joiner node due to improper input sanitization (CVSS 3.1 Base Score 10.0). :contentReference[oaicite:0]{index=0}.… in 8.4.10-10.1
Every release in between
featureAdds OpenID Connect (OIDC) authentication through external identity providers. See Connect OIDC.
featureAdds SQL functions that calculate the distance between vector values. See DISTANCE().
featureUnder certain circumstances, when adding an AUTO_INCREMENT column to an existing table, some records in that table could be skipped, resulting in inaccurate values in the AUTO_INCREMENT column. (Bug #115136, Bug #37105825)
featureDuring a buffer-pool resize, Adaptive Hash Index could be disabled in mysqld-auto.cnf even though innodb_adaptive_hash_index=ON. (Bug #39157211)
featureFixed a debug assertion in row_upd_rec_in_place() for non-versioned ROW_FORMAT=REDUNDANT rows. (Bug #39165747)
featureFixed an issue relating to table maintenance and clean-up. (Bug #39091376)
featureFixed an issue relating to unique indexes. (Bug #38501299)
otherPXC-5106: Sets sql_require_primary_key=1 when using pxc_strict_mode=ENFORCING or MASTER.
featurePXC-5208: Adds the repl.force_sst_after_inconsistency option. When enabled, a node voted out of the cluster because of a data inconsistency removes grastate.dat, so the next start uses a full State Snapshot Transfer (SST) instead of Incremental State Transfer (IST).
fixPXC-5252: Fixed an issue where clone State Snapshot Transfer (SST) failed when the validate_password component was enabled with a strict policy, because the generated password for mysql.pxc.sst.user did not meet the configured requirements.
fixPXC-5291: Fixed an issue where a user with only the SET_ANY_DEFINER privilege could create a trigger when log_bin_trust_function_creators=0.
fixPXC-5296: Fixed an issue where a server upgrade failed when pxc_strict_mode was ENFORCING or MASTER, because the upgrade could not set sql_require_primary_key=OFF to rebuild system tables that have no primary key.
fixPXC-5305: Fixed an issue where a query could return incorrect results when an internal temporary table was converted from MEMORY to an on-disk InnoDB table during execution.
featureIntegrates the new Key Management Interoperability Protocol (KMIP) library into the key management component.
featureAdds JSONL (JSON Lines) output format for Audit Log Filter.
featureIncreases the verbosity of the data dictionary upgrade process, making it easier to diagnose issues that occur during upgrade.
featureLogs SQL statements for the Audit Log Filter table_access class and the read and insert subclasses.
featureFlushes the audit log buffer on server shutdown when the ASYNCHRONOUS logging strategy is in use, preventing the loss of buffered events.
featureReduces memory pressure in the Audit Log Filter component caused by VFS buffering.
featureAligns the audit_log_filter.format=NEW output between the 8.0 plugin and the 8.4 component.
featureOptimizes performance for mem_root_deque.
featureConnection attribute parsing could read a length-encoded size field before verifying that the complete field was present in the packet, leading to an out-of-bounds read. A size check is now performed before reading the field. (Bug #39116965)
featureA regression in row size estimation for ROW_FORMAT=COMPRESSED tables could cause CREATE TABLE to fail with Row size too large for tables that were accepted in earlier releases. (Bug #39129182, Bug #120323)
securityCVE-2026-46850: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via HTTP to compromise MySQL Shell, with potential scope change impact on additional products (CVSS 3.1 Base Score 9.9).
securityCVE-2026-46860: A vulnerability in MySQL Router allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router (CVSS 3.1 Base Score 9.8).
securityCVE-2026-46861: A vulnerability in MySQL NDB Cluster (NDB Operator) allows a low-privileged attacker with network access via HTTP to access or modify critical data, with potential scope change impact (CVSS 3.1 Base Score 9.6).
securityCVE-2026-46862: A vulnerability in MySQL Router allows an unauthenticated attacker with network access via TLS to cause a hang or repeatable unexpected exit of MySQL Router (CVSS 3.1 Base Score 7.5).
securityCVE-2026-46863: A vulnerability in MySQL Server connection handling allows an unauthenticated attacker with network access via multiple protocols to cause a hang or repeatable unexpected exit of the server (CVSS 3.1 Base Score 7.5).
securityCVE-2026-46869: A vulnerability in MySQL Shell (Dump and Load) allows an unauthenticated attacker with network access to access critical data when user interaction is required (CVSS 3.1 Base Score 6.5).
securityCVE-2026-46870: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access to compromise MySQL Shell, with potential scope change impact (CVSS 3.1 Base Score 8.5).
securityCVE-2026-46871: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via multiple protocols to access critical data (CVSS 3.1 Base Score 6.5).
securityCVE-2026-48165: A vulnerability in the handling of the wsrep_sst_donor and wsrep_sst_receive_address system variables could allow a highly privileged user to execute arbitrary shell commands with the privileges of the mysqld process during State Snapshot Transfer (SST) due to improper input…
securityCVE-2026-49261: A vulnerability in wsrep_notify_cmd could allow a remote attacker to execute arbitrary shell commands by embedding commands in the name of a joining node when wsrep_notify_cmd is enabled due to improper input sanitization (CVSS 3.1 Base Score 10.0). The fix was backported from…
breakingPXC-5195: Removes obsolete configuration variables (wsrep-slave-FK-checks, wsrep-slave-UK-checks, wsrep-causal-reads) from Percona XtraDB Cluster 9.7.1-1.
fixPXC-4683: Fixed an issue where a node could leave the cluster after an error in a stored procedure.
fixPXC-4799: Fixed an issue where a backup node could fail with an Inconsistency error when a pending DDL operation conflicted with FLUSH TABLES WITH READ LOCK (FTWRL).
fixPXC-4805: The mysqlchk script was missing from the Percona XtraDB Cluster 8.4 package and binary tarball distributions.
fixPXC-4825: Fixed an issue where performance_schema.variables_by_thread did not include wsrep threads.
fixPXC-4844: Fixed an issue where inconsistency voting under high load could trigger an internal deadlock and permanently pause Flow Control.
fixPXC-4849: Fixed an issue where a node could fail to join the cluster after a successful State Snapshot Transfer (SST) because of an Event Scheduler task and the read_only setting.
fixPXC-4887: Fixed an issue where CREATE ROLE statements were not replicated when the validate password plugin was enabled.
fixPXC-4963: Fixed an issue where GRANT privileges differed between in-place upgraded and newly installed Percona XtraDB Cluster instances.
fixPXC-5233: Fixed an issue where the Percona XtraDB Cluster 9.7 entrypoint invoked the removed mysql_upgrade binary, causing an unexpected exit loop during rolling upgrades from Percona XtraDB Cluster 8.4.
fixPXC-5229: Fixed an issue where WSREP applier threads could inherit tx_read_only=true, causing replication failures and node inconsistency.
fixPXC-5230: Fixed potentially dangling pointer existence at the end of sst_joiner_thread().
fixPXC-5282: Fixed an issue where upgrading from Percona XtraDB Cluster 8.4 to 9.7 did not fully update the mysql.pxc.sst.role table, which could cause clone State Snapshot Transfer (SST) operations to fail.
fixPXC-5209: Fixed an issue where a corrupted Galera cache could cause the server to exit during startup.
fixPXC-5244: Changes the default XtraBackup locking mode to lock-ddl=ON during State Snapshot Transfer (SST).
otherPercona XtraDB Cluster uses Profile-Guided Optimization (PGO) builds to improve runtime performance. PGO uses profiling data from representative workloads to guide compiler optimizations, which can improve throughput and reduce latency. Percona XtraDB Cluster packages are built with PGO enabled.…
otherIn Percona XtraDB Cluster 9.7, packaging was reorganized to align more closely with upstream MySQL, consistent with the equivalent change in Percona Server for MySQL 9.7. Several packages were split into separate components, which may affect upgrades and dependency resolution compared with earlier…
otherpercona-xtradb-cluster-client-core
otherpercona-xtradb-cluster-client-plugins
otherpercona-xtradb-cluster-client
+7 more items in the release notesfeatureAdds OpenID Connect (OIDC) authentication and authorization. Users can authenticate with Identity tokens issued by external Identity Providers (IDPs) instead of MySQL passwords. The OIDC plugin supports multiple IDPs, maps IDP groups to MySQL roles, supports proxy users based on group membership,…
featureImproves InnoDB performance for workloads limited by Least Recently Used (LRU) flush speed. The improvements reduce LRU list mutex contention, restore dedicated LRU manager threads, optimize LRU scanning, and allow single-page flushing to proceed while an LRU batch flush is running.
featureImproves InnoDB buffer pool initialization on NUMA-enabled systems by using multi-threaded memory allocation. The improvement reduces initialization time and can shorten server startup for instances with large buffer pools. Starting in 8.4.11, innodb_numa_interleave controls only interleaved NUMA…
featureImproves InnoDB performance for highly concurrent range-select workloads by reducing BUF_BLOCK_MUTEX contention when multiple threads access the same buffer pool page. The improvement increases throughput for read workloads that repeatedly access the same hot pages.
featureAdds timestamps to the Group Communication System (GCS) debug trace file. The timestamps make large trace files easier to analyze and help correlate Group Replication communication events with other server activity.
featureFixed an issue that could cause an InnoDB deadlock during B-tree page merges while concurrent searches were running. (Bug #39129182)
featureFixed an issue where stricter InnoDB row-size validation could reject or generate warnings for table definitions accepted by earlier MySQL LTS releases. (Bug #120323, Bug #39249507)
featureFixed an issue that could produce incorrect values when adding an AUTO_INCREMENT column to an existing InnoDB table. (Bug #115136, Bug #37105825)
featureFixed an issue that could return incorrect results when a scalar subquery and its outer query referenced the same Common Table Expression (CTE). (Bug #120403, Bug #39321676)
featureFixed an issue that could prevent the server from starting on Oracle Linux 9 or Red Hat Enterprise Linux 9 when innodb_redo_log_encrypt=ON was configured. (Bug #39181231)
featurePXC-5106: When pxc_strict_mode is set to ENFORCING or MASTER, Percona XtraDB Cluster now also enables sql_require_primary_key globally, so tables without a primary key can no longer be created or altered. Previously, you could create such a table but could not run DML statements on it. While…
featurePXC-5208: Adds the repl.force_sst_after_inconsistency Galera provider option. When this option is enabled, a node removes the grastate.dat file on shutdown in two cases: when it is voted out of the cluster because of a data inconsistency, or when it fails to apply a write-set during Incremental…
fixPXC-5252: Fixed an issue where State Snapshot Transfer (SST) with the Clone plugin failed when the validate_password component enforced a strict password policy. The temporary SST user on the donor is no longer subject to password validation. For the Clone SST method, you can now set the…
fixPXC-5291: Fixed an issue where a user with the SET_ANY_DEFINER privilege but without the SUPER privilege could create a trigger while log_bin_trust_function_creators was disabled. Such statements are now rejected with the same error as in Percona Server for MySQL.
fixPXC-5292: Fixed an issue where a CREATE TRIGGER statement with a nonexistent DEFINER, run by a user with the SET_ANY_DEFINER privilege, could cause node inconsistency and eviction. The statement is now validated before it is replicated.
fixPXC-5305: Fixed an issue where a query could silently return incorrect results when an internal temporary table was converted from memory to an on-disk InnoDB table during execution. (MySQL Bug #116741)
featureIntegrates the new Key Management Interoperability Protocol (KMIP) library into the key management component.
featureAdds JSONL (JSON Lines) output format for Audit Log Filter.
featureIncreases the verbosity of the data dictionary upgrade process, making it easier to diagnose issues that occur during upgrade.
featureLogs SQL statements for the Audit Log Filter table_access class and the read and insert subclasses.
featureFlushes the audit log buffer on server shutdown when the ASYNCHRONOUS logging strategy is in use, preventing the loss of buffered events.
featureReduces memory pressure in the Audit Log Filter component caused by VFS buffering.
featureAligns the audit_log_filter.format=NEW output between the 8.0 plugin and the 8.4 component.
featureOptimizes performance for mem_root_deque.
featureConnection attribute parsing could read a length-encoded size field before verifying that the complete field was present in the packet, leading to an out-of-bounds read. A size check is now performed before reading the field. (Bug #39116965)
featureA regression in row size estimation for ROW_FORMAT=COMPRESSED tables could cause CREATE TABLE to fail with Row size too large for tables that were accepted in earlier releases. (Bug #39129182, Bug #120323)
securityCVE-2026-46850: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via HTTP to compromise MySQL Shell, with potential scope change impact on additional products (CVSS 3.1 Base Score 9.9).
securityCVE-2026-46860: A vulnerability in MySQL Router allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router (CVSS 3.1 Base Score 9.8).
securityCVE-2026-46861: A vulnerability in MySQL NDB Cluster (NDB Operator) allows a low-privileged attacker with network access via HTTP to access or modify critical data, with potential scope change impact (CVSS 3.1 Base Score 9.6).
securityCVE-2026-46862: A vulnerability in MySQL Router allows an unauthenticated attacker with network access via TLS to cause a hang or repeatable unexpected exit of MySQL Router (CVSS 3.1 Base Score 7.5).
securityCVE-2026-46863: A vulnerability in MySQL Server connection handling allows an unauthenticated attacker with network access via multiple protocols to cause a hang or repeatable unexpected exit of the server (CVSS 3.1 Base Score 7.5).
securityCVE-2026-46869: A vulnerability in MySQL Shell (Dump and Load) allows an unauthenticated attacker with network access to access critical data when user interaction is required (CVSS 3.1 Base Score 6.5).
securityCVE-2026-46870: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access to compromise MySQL Shell, with potential scope change impact (CVSS 3.1 Base Score 8.5).
securityCVE-2026-46871: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via multiple protocols to access critical data (CVSS 3.1 Base Score 6.5).
securityCVE-2026-48165: A vulnerability in the handling of the wsrep_sst_donor and wsrep_sst_receive_address system variables allowed a high-privileged user to execute arbitrary shell commands with the privileges of the mariadbd process during State Snapshot Transfer (SST) due to improper input…
securityCVE-2026-49261: A vulnerability in MariaDB Server with wsrep_notify_cmd enabled allowed a remote attacker to execute arbitrary shell commands by embedding commands in the name of a joiner node due to improper input sanitization (CVSS 3.1 Base Score 10.0). :contentReference[oaicite:0]{index=0}.…
fixPXC-4683: Fixed an issue where a node could leave the cluster after an error in a stored procedure.
fixPXC-4799: Fixed an issue where a backup node could fail with an Inconsistency error when a pending DDL operation conflicted with FLUSH TABLES WITH READ LOCK (FTWRL).
fixPXC-4805: The mysqlchk script was missing from the Percona XtraDB Cluster 8.4 package and binary tarball distributions.
fixPXC-4825: Fixed an issue where performance_schema.variables_by_thread did not include wsrep threads.
fixPXC-4844: Fixed an issue where inconsistency voting under high load could trigger an internal deadlock and permanently pause Flow Control.
fixPXC-4849: Fixed an issue where a node could fail to join the cluster after a successful State Snapshot Transfer (SST) because of an Event Scheduler task and the read_only setting.
fixPXC-4887: Fixed an issue where CREATE ROLE statements were not replicated when the validate password plugin was enabled.
fixPXC-4963: Fixed an issue where GRANT privileges differed between in-place upgraded and newly installed Percona XtraDB Cluster instances.
fixPXC-5233: Fixed an issue where the Percona XtraDB Cluster 8.4 entrypoint invoked the removed mysql_upgrade binary, causing an unexpected exit loop during rolling upgrades from Percona XtraDB Cluster 8.0.
fixPXC-5229: Fixed an issue where WSREP applier threads could inherit tx_read_only=true, causing replication failures and node inconsistency.
fixPXC-5209: Fixed an issue where a corrupted Galera cache could cause the server to exit during startup.
featurePercona XtraDB Cluster 8.4.10-10 adds support for Ubuntu 26.04.
otherPercona Server for MySQL releases include a mixture of PGO and non-PGO builds. Where Profile-Guided Optimization (PGO) is enabled, the compiler uses runtime profiling data from representative workloads to guide optimization, which can improve throughput and reduce latency compared with non-PGO…
otherSee Profile-Guided Optimization (PGO) and non-PGO builds for benefits, considerations, and which build you receive for your platform.