<?xml version='1.0' encoding='UTF-8'?>
<oval_definitions xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:red-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5">
  <generator>
    <oval:product_name>Tuxcare Errata System</oval:product_name>
    <oval:product_version>0.0.1</oval:product_version>
    <oval:schema_version>5.10</oval:schema_version>
    <oval:timestamp>2026-09-22T08:14:07</oval:timestamp>
  </generator>
  <definitions>
    <definition class="patch" id="oval:com.tuxcare.clsa:def:1790064803" version="1">
      <metadata>
        <title>percona-server: Fix of 2 CVEs</title>
        <affected family="unix">
          <platform>Community Enterprise Operating System 8</platform>
        </affected>
        <reference ref_id="CLSA-2026:1790064803" ref_url="https://cve.tuxcare.com/els-percona/releases/CLSA-2026:1790064803" source="CLSA"/>
        <reference ref_id="CVE-2026-46863" ref_url="https://cve.tuxcare.com/els-percona/cve/CVE-2026-46863" source="CVE"/>
        <reference ref_id="CVE-2026-46862" ref_url="https://cve.tuxcare.com/els-percona/cve/CVE-2026-46862" source="CVE"/>
        <description>- CVE-2026-46863: Fix out-of-bounds read during connection attribute parsing
- CVE-2026-46862: Fix MySQL Router crash on repeated X Protocol TLS upgrade</description>
        <advisory from="packager@tuxcare.com">
          <severity>Important</severity>
          <rights>TuxCare License Agreement</rights>
          <issued date="2026-09-22"/>
          <updated date="2026-09-22"/>
          <cve cwe="CWE-400" href="https://cve.tuxcare.com/els-percona/cve/CVE-2026-46863" impact="unknown" public="20260617">CVE-2026-46863</cve>
          <cve cwe="CWE-400" href="https://cve.tuxcare.com/els-percona/cve/CVE-2026-46862" impact="unknown" public="20260617">CVE-2026-46862</cve>
          <affected_cpe_list>
            <cpe>cpe:/o:centos:centos:8</cpe>
          </affected_cpe_list>
        </advisory>
      </metadata>
      <criteria operator="OR">
        <criterion comment="percona-icu-data-files is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" test_ref="oval:com.tuxcare.clsa:tst:1790064803001"/>
        <criterion comment="percona-icu-data-files isn't signed with TuxCare key" test_ref="oval:com.tuxcare.clsa:tst:1790064803002"/>
        <criterion comment="percona-mysql-router is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" test_ref="oval:com.tuxcare.clsa:tst:1790064803003"/>
        <criterion comment="percona-mysql-router isn't signed with TuxCare key" test_ref="oval:com.tuxcare.clsa:tst:1790064803004"/>
        <criterion comment="percona-server-client is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" test_ref="oval:com.tuxcare.clsa:tst:1790064803005"/>
        <criterion comment="percona-server-client isn't signed with TuxCare key" test_ref="oval:com.tuxcare.clsa:tst:1790064803006"/>
        <criterion comment="percona-server-devel is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" test_ref="oval:com.tuxcare.clsa:tst:1790064803007"/>
        <criterion comment="percona-server-devel isn't signed with TuxCare key" test_ref="oval:com.tuxcare.clsa:tst:1790064803008"/>
        <criterion comment="percona-server-rocksdb is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" test_ref="oval:com.tuxcare.clsa:tst:1790064803009"/>
        <criterion comment="percona-server-rocksdb isn't signed with TuxCare key" test_ref="oval:com.tuxcare.clsa:tst:1790064803010"/>
        <criterion comment="percona-server-server is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" test_ref="oval:com.tuxcare.clsa:tst:1790064803011"/>
        <criterion comment="percona-server-server isn't signed with TuxCare key" test_ref="oval:com.tuxcare.clsa:tst:1790064803012"/>
        <criterion comment="percona-server-shared is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" test_ref="oval:com.tuxcare.clsa:tst:1790064803013"/>
        <criterion comment="percona-server-shared isn't signed with TuxCare key" test_ref="oval:com.tuxcare.clsa:tst:1790064803014"/>
        <criterion comment="percona-server-shared-compat is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" test_ref="oval:com.tuxcare.clsa:tst:1790064803015"/>
        <criterion comment="percona-server-shared-compat isn't signed with TuxCare key" test_ref="oval:com.tuxcare.clsa:tst:1790064803016"/>
        <criterion comment="percona-server-test is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" test_ref="oval:com.tuxcare.clsa:tst:1790064803017"/>
        <criterion comment="percona-server-test isn't signed with TuxCare key" test_ref="oval:com.tuxcare.clsa:tst:1790064803018"/>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <red-def:rpminfo_test check="at least one" comment="percona-icu-data-files is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" id="oval:com.tuxcare.clsa:tst:1790064803001" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803001"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803001"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="none satisfy" comment="percona-icu-data-files isn't signed with TuxCare key" id="oval:com.tuxcare.clsa:tst:1790064803002" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803001"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803002"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="at least one" comment="percona-mysql-router is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" id="oval:com.tuxcare.clsa:tst:1790064803003" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803003"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803001"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="none satisfy" comment="percona-mysql-router isn't signed with TuxCare key" id="oval:com.tuxcare.clsa:tst:1790064803004" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803003"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803002"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="at least one" comment="percona-server-client is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" id="oval:com.tuxcare.clsa:tst:1790064803005" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803005"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803001"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="none satisfy" comment="percona-server-client isn't signed with TuxCare key" id="oval:com.tuxcare.clsa:tst:1790064803006" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803005"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803002"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="at least one" comment="percona-server-devel is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" id="oval:com.tuxcare.clsa:tst:1790064803007" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803007"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803001"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="none satisfy" comment="percona-server-devel isn't signed with TuxCare key" id="oval:com.tuxcare.clsa:tst:1790064803008" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803007"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803002"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="at least one" comment="percona-server-rocksdb is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" id="oval:com.tuxcare.clsa:tst:1790064803009" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803009"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803001"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="none satisfy" comment="percona-server-rocksdb isn't signed with TuxCare key" id="oval:com.tuxcare.clsa:tst:1790064803010" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803009"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803002"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="at least one" comment="percona-server-server is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" id="oval:com.tuxcare.clsa:tst:1790064803011" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803011"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803001"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="none satisfy" comment="percona-server-server isn't signed with TuxCare key" id="oval:com.tuxcare.clsa:tst:1790064803012" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803011"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803002"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="at least one" comment="percona-server-shared is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" id="oval:com.tuxcare.clsa:tst:1790064803013" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803013"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803001"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="none satisfy" comment="percona-server-shared isn't signed with TuxCare key" id="oval:com.tuxcare.clsa:tst:1790064803014" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803013"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803002"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="at least one" comment="percona-server-shared-compat is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" id="oval:com.tuxcare.clsa:tst:1790064803015" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803015"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803001"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="none satisfy" comment="percona-server-shared-compat isn't signed with TuxCare key" id="oval:com.tuxcare.clsa:tst:1790064803016" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803015"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803002"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="at least one" comment="percona-server-test is earlier than 0:8.0.46-37.1.el8.tuxcare.els2" id="oval:com.tuxcare.clsa:tst:1790064803017" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803017"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803001"/>
    </red-def:rpminfo_test>
    <red-def:rpminfo_test check="none satisfy" comment="percona-server-test isn't signed with TuxCare key" id="oval:com.tuxcare.clsa:tst:1790064803018" version="1">
      <red-def:object object_ref="oval:com.tuxcare.clsa:obj:1790064803017"/>
      <red-def:state state_ref="oval:com.tuxcare.clsa:ste:1790064803002"/>
    </red-def:rpminfo_test>
  </tests>
  <objects>
    <red-def:rpminfo_object id="oval:com.tuxcare.clsa:obj:1790064803001" version="1">
      <red-def:name>percona-icu-data-files</red-def:name>
    </red-def:rpminfo_object>
    <red-def:rpminfo_object id="oval:com.tuxcare.clsa:obj:1790064803003" version="1">
      <red-def:name>percona-mysql-router</red-def:name>
    </red-def:rpminfo_object>
    <red-def:rpminfo_object id="oval:com.tuxcare.clsa:obj:1790064803005" version="1">
      <red-def:name>percona-server-client</red-def:name>
    </red-def:rpminfo_object>
    <red-def:rpminfo_object id="oval:com.tuxcare.clsa:obj:1790064803007" version="1">
      <red-def:name>percona-server-devel</red-def:name>
    </red-def:rpminfo_object>
    <red-def:rpminfo_object id="oval:com.tuxcare.clsa:obj:1790064803009" version="1">
      <red-def:name>percona-server-rocksdb</red-def:name>
    </red-def:rpminfo_object>
    <red-def:rpminfo_object id="oval:com.tuxcare.clsa:obj:1790064803011" version="1">
      <red-def:name>percona-server-server</red-def:name>
    </red-def:rpminfo_object>
    <red-def:rpminfo_object id="oval:com.tuxcare.clsa:obj:1790064803013" version="1">
      <red-def:name>percona-server-shared</red-def:name>
    </red-def:rpminfo_object>
    <red-def:rpminfo_object id="oval:com.tuxcare.clsa:obj:1790064803015" version="1">
      <red-def:name>percona-server-shared-compat</red-def:name>
    </red-def:rpminfo_object>
    <red-def:rpminfo_object id="oval:com.tuxcare.clsa:obj:1790064803017" version="1">
      <red-def:name>percona-server-test</red-def:name>
    </red-def:rpminfo_object>
  </objects>
  <states>
    <red-def:rpminfo_state id="oval:com.tuxcare.clsa:ste:1790064803001" version="1">
      <red-def:arch datatype="string" operation="equals">x86_64</red-def:arch>
      <red-def:evr datatype="evr_string" operation="less than">0:8.0.46-37.1.el8.tuxcare.els2</red-def:evr>
    </red-def:rpminfo_state>
    <red-def:rpminfo_state id="oval:com.tuxcare.clsa:ste:1790064803002" version="1">
      <red-def:signature_keyid operation="equals">d07bf2a08d50eb66</red-def:signature_keyid>
    </red-def:rpminfo_state>
  </states>
</oval_definitions>
