From 82948192166180afb10198468f11d8a5cfb64135 Mon Sep 17 00:00:00 2001 From: Alina Derkach Date: Thu, 2 Jul 2026 16:37:04 +0200 Subject: [PATCH 01/10] PXC-4934 [Doc] Release notes for - PXC 8.4.10 new file: docs/release-notes/8.4.10-10.md modified: docs/release-notes/release-notes_index.md modified: docs/templates/pdf_cover_page.tpl modified: mkdocs-base.yml modified: variables.yml --- docs/release-notes/8.4.10-10.md | 104 ++++++++++++++++++++++ docs/release-notes/release-notes_index.md | 2 + docs/templates/pdf_cover_page.tpl | 2 +- mkdocs-base.yml | 1 + variables.yml | 6 +- 5 files changed, 111 insertions(+), 4 deletions(-) create mode 100644 docs/release-notes/8.4.10-10.md diff --git a/docs/release-notes/8.4.10-10.md b/docs/release-notes/8.4.10-10.md new file mode 100644 index 00000000..fd47d5a9 --- /dev/null +++ b/docs/release-notes/8.4.10-10.md @@ -0,0 +1,104 @@ +# Percona XtraDB Cluster 8.4.10-10 (2026-07-) + +!!! note "" + + Percona XtraDB Cluster 8.4.9-9 was not released; 8.4.10-10 is the next build in this series. This release includes enhancements and bug fixes from MySQL 8.4.9 and MySQL 8.4.10. + +Percona XtraDB Cluster (PXC) supports critical business applications in both cloud and on-premises environments, including public, private, and hybrid setups. Our free, open source, enterprise-grade solution includes the high availability and security features your business requires to meet your customer expectations and business goals. + +Percona XtraDB Cluster 8.4.10-10 is based on Percona Server for MySQL and includes all improvements and bug fixes available in the [Percona Server for MySQL 8.4.10-10 (2026-06-30) release notes](https://docs.percona.com/percona-server/8.4/release-notes/8.4.10-10.html). + +## Release highlights + +### Percona Server for MySQL 8.4.10-10 + +Percona Server for MySQL 8.4.10-10 introduces the following new features and improvements: + +* Integrates the new Key Management Interoperability Protocol (KMIP) library into the key management component. + +* Adds JSONL (JSON Lines) output format for Audit Log Filter. + +* Increases the verbosity of the data dictionary upgrade process, making it easier to diagnose issues that occur during upgrade. + +* Logs SQL statements for the Audit Log Filter `table_access` class and the `read` and `insert` subclasses. + +* Flushes the audit log buffer on server shutdown when the `ASYNCHRONOUS` logging strategy is in use, preventing the loss of buffered events. + +* Reduces memory pressure in the Audit Log Filter component caused by VFS buffering. + +* Aligns the `audit_log_filter.format=NEW` output between the 8.0 plugin and the 8.4 component. + +* Optimizes performance for `mem_root_deque`. + +### MySQL 8.4.10 + +Improvements and bug fixes provided by Oracle for MySQL 8.4.10 and included in Percona Server for MySQL are the following: + +* Connection attribute parsing could read a length-encoded size field before verifying that the complete field was present in the packet, leading to an out-of-bounds read. A size check is now performed before reading the field. (Bug #39116965) + +* A regression in row size estimation for `ROW_FORMAT=COMPRESSED` tables could cause `CREATE TABLE` to fail with `Row size too large` for tables that were accepted in earlier releases. (Bug #39129182, Bug #120323) + +Find the complete list of bug fixes and changes in the [MySQL 8.4.10 release notes](https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-10.html). + +## Security updates + +This release addresses the following security vulnerabilities: + +* [CVE-2026-46850](https://www.cve.org/CVERecord?id=CVE-2026-46850): A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via HTTP to compromise MySQL Shell, with potential scope change impact on additional products (CVSS 3.1 Base Score 9.9). + +* [CVE-2026-46860](https://www.cve.org/CVERecord?id=CVE-2026-46860): A vulnerability in MySQL Router allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router (CVSS 3.1 Base Score 9.8). + +* [CVE-2026-46861](https://www.cve.org/CVERecord?id=CVE-2026-46861): A vulnerability in MySQL NDB Cluster (NDB Operator) allows a low-privileged attacker with network access via HTTP to access or modify critical data, with potential scope change impact (CVSS 3.1 Base Score 9.6). + +* [CVE-2026-46862](https://www.cve.org/CVERecord?id=CVE-2026-46862): A vulnerability in MySQL Router allows an unauthenticated attacker with network access via TLS to cause a hang or repeatable unexpected exit of MySQL Router (CVSS 3.1 Base Score 7.5). + +* [CVE-2026-46863](https://www.cve.org/CVERecord?id=CVE-2026-46863): A vulnerability in MySQL Server connection handling allows an unauthenticated attacker with network access via multiple protocols to cause a hang or repeatable unexpected exit of the server (CVSS 3.1 Base Score 7.5). + +* [CVE-2026-46869](https://www.cve.org/CVERecord?id=CVE-2026-46869): A vulnerability in MySQL Shell (Dump and Load) allows an unauthenticated attacker with network access to access critical data when user interaction is required (CVSS 3.1 Base Score 6.5). + +* [CVE-2026-46870](https://www.cve.org/CVERecord?id=CVE-2026-46870): A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access to compromise MySQL Shell, with potential scope change impact (CVSS 3.1 Base Score 8.5). + +* [CVE-2026-46871](https://www.cve.org/CVERecord?id=CVE-2026-46871): A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via multiple protocols to access critical data (CVSS 3.1 Base Score 6.5). + +* [CVE-2026-48165](https://www.cve.org/CVERecord?id=CVE-2026-48165): A vulnerability in the handling of the `wsrep_sst_donor` and `wsrep_sst_receive_address` system variables allowed a high-privileged user to execute arbitrary shell commands with the privileges of the `mariadbd` process during State Snapshot Transfer (SST) due to improper input sanitization (CVSS 3.1 Base Score 7.2). :contentReference[oaicite:0]{index=0}. (This fix was backported from MariaDB. Thanks to the MariaDB project for identifying and fixing this issue.) + +* [CVE-2026-49261](https://www.cve.org/CVERecord?id=CVE-2026-49261): A vulnerability in MariaDB Server with `wsrep_notify_cmd` enabled allowed a remote attacker to execute arbitrary shell commands by embedding commands in the name of a joiner node due to improper input sanitization (CVSS 3.1 Base Score 10.0). :contentReference[oaicite:0]{index=0}. (This fix was backported from MariaDB. Thanks to the MariaDB project for identifying and fixing this issue.) + +## Bug fixes + +* [PXC-4683](https://perconadev.atlassian.net/browse/PXC-4683): Fixed an issue where a node could leave the cluster after an error in a stored procedure. + +* [PXC-4799](https://perconadev.atlassian.net/browse/PXC-4799): Fixed an issue where a backup node could fail with an `Inconsistency` error when a pending DDL operation conflicted with `FLUSH TABLES WITH READ LOCK` (FTWRL). + +* [PXC-4805](https://perconadev.atlassian.net/browse/PXC-4805): The `mysqlchk` script was missing from the Percona XtraDB Cluster 8.4 package and binary tarball distributions. + +* [PXC-4825](https://perconadev.atlassian.net/browse/PXC-4825): Fixed an issue where `performance_schema.variables_by_thread` did not include `wsrep` threads. + +* [PXC-4844](https://perconadev.atlassian.net/browse/PXC-4844): Fixed an issue where inconsistency voting under high load could trigger an internal deadlock and permanently pause Flow Control. + +* [PXC-4849](https://perconadev.atlassian.net/browse/PXC-4849): Fixed an issue where a node could fail to join the cluster after a successful State Snapshot Transfer (SST) because of an Event Scheduler task and the `read_only` setting. + +* [PXC-4887](https://perconadev.atlassian.net/browse/PXC-4887): Fixed an issue where `CREATE ROLE` statements were not replicated when the validate password plugin was enabled. + +* [PXC-4963](https://perconadev.atlassian.net/browse/PXC-4963): Fixed an issue where `GRANT` privileges differed between in-place upgraded and newly installed Percona XtraDB Cluster instances. + +* [PXC-5233](https://perconadev.atlassian.net/browse/PXC-5233): Fixed an issue where the Percona XtraDB Cluster 8.4 entrypoint invoked the removed `mysql_upgrade` binary, causing an unexpected exit loop during rolling upgrades from Percona XtraDB Cluster 8.0. + +* [PXC-5229](https://perconadev.atlassian.net/browse/PXC-5229): Fixed an issue where `WSREP` applier threads could inherit `tx_read_only=true`, causing replication failures and node inconsistency. + +## Builds and packaging + +* Percona Server for MySQL releases include a mixture of PGO and non-PGO builds. Where Profile-Guided Optimization (PGO) is enabled, the compiler uses runtime profiling data from representative workloads to guide optimization, which can improve throughput and reduce latency compared with non-PGO builds. + +* See [Profile-Guided Optimization (PGO) and non-PGO builds](https://docs.percona.com/percona-server/8.4/pgo.html) for benefits, considerations, and which build you receive for your platform. + +## Useful links + +* The [Percona XtraDB Cluster installation instructions](https://www.percona.com/doc/percona-xtradb-cluster/8.4/install/index.html) + +* The [Percona XtraDB Cluster downloads](https://www.percona.com/mysql/software/percona-xtradb-cluster) + +* The [Percona XtraDB Cluster GitHub location](https://github.com/percona/percona-xtradb-cluster) + +* To contribute to the documentation, review the [Documentation Contribution Guide](https://github.com/percona/pxc-docs/blob/8.4/contributing.md) + diff --git a/docs/release-notes/release-notes_index.md b/docs/release-notes/release-notes_index.md index 20737416..abbda3af 100644 --- a/docs/release-notes/release-notes_index.md +++ b/docs/release-notes/release-notes_index.md @@ -1,5 +1,7 @@ # Percona XtraDB Cluster {{vers}} release notes index +* [Percona XtraDB Cluster 8.4.10-10 (2026-07-)](8.4.10-10.md) + * [Percona XtraDB Cluster 8.4.8-8 (2026-04-15)](8.4.8-8.md) * [Percona XtraDB Cluster 8.4.7-7 (2026-01-13)](8.4.7-7.md) diff --git a/docs/templates/pdf_cover_page.tpl b/docs/templates/pdf_cover_page.tpl index e39ea3c7..6b421f87 100644 --- a/docs/templates/pdf_cover_page.tpl +++ b/docs/templates/pdf_cover_page.tpl @@ -7,5 +7,5 @@ {% if config.site_description %}

{{ config.site_description }}

{% endif %} -

8.4.8-8 (April 15, 2026)

+

8.4.10-10 (July , 2026)

diff --git a/mkdocs-base.yml b/mkdocs-base.yml index c6277ce6..ccf7ac03 100644 --- a/mkdocs-base.yml +++ b/mkdocs-base.yml @@ -174,6 +174,7 @@ nav: - get-help.md - Release notes: - Release notes index: release-notes/release-notes_index.md + - release-notes/8.4.10-10.md - release-notes/8.4.8-8.md - release-notes/8.4.7-7.md - release-notes/8.4.6-6.md diff --git a/variables.yml b/variables.yml index 2e7d379e..44d737fc 100644 --- a/variables.yml +++ b/variables.yml @@ -1,9 +1,9 @@ # variables for HTML output -release: '8.4.8-8' +release: '8.4.10-10' version: '8.4' vers: '8.4' # we are going to use it instead of version pkg: 'pxc-84-lts' -release_date: '2026-04-15' -title_date: '2026-04-15' +release_date: '2026-07-' +title_date: '2026-07-' From 5da272934b842b38a7907f805912c0a4c5fa4d9b Mon Sep 17 00:00:00 2001 From: Alina Derkach Date: Wed, 22 Jul 2026 13:12:03 +0200 Subject: [PATCH 02/10] Update 8.4.10-10.md --- docs/release-notes/8.4.10-10.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/release-notes/8.4.10-10.md b/docs/release-notes/8.4.10-10.md index fd47d5a9..9edebec3 100644 --- a/docs/release-notes/8.4.10-10.md +++ b/docs/release-notes/8.4.10-10.md @@ -88,6 +88,8 @@ This release addresses the following security vulnerabilities: ## Builds and packaging +* Percona XtraDB Cluster 8.4.10-10 adds support for Ubuntu 26.04. + * Percona Server for MySQL releases include a mixture of PGO and non-PGO builds. Where Profile-Guided Optimization (PGO) is enabled, the compiler uses runtime profiling data from representative workloads to guide optimization, which can improve throughput and reduce latency compared with non-PGO builds. * See [Profile-Guided Optimization (PGO) and non-PGO builds](https://docs.percona.com/percona-server/8.4/pgo.html) for benefits, considerations, and which build you receive for your platform. From 3a9b69a1632b448a83b785c29f379bae35988749 Mon Sep 17 00:00:00 2001 From: Alina Derkach Date: Wed, 22 Jul 2026 15:31:36 +0200 Subject: [PATCH 03/10] Update 8.4.10-10.md --- docs/release-notes/8.4.10-10.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/release-notes/8.4.10-10.md b/docs/release-notes/8.4.10-10.md index 9edebec3..32405fb4 100644 --- a/docs/release-notes/8.4.10-10.md +++ b/docs/release-notes/8.4.10-10.md @@ -1,4 +1,4 @@ -# Percona XtraDB Cluster 8.4.10-10 (2026-07-) +# Percona XtraDB Cluster 8.4.10-10 (2026-07-23) !!! note "" From eaba7f53c5c91275e29dceed044fd2afe1d08269 Mon Sep 17 00:00:00 2001 From: Alina Derkach Date: Wed, 22 Jul 2026 15:32:01 +0200 Subject: [PATCH 04/10] Update variables.yml --- variables.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/variables.yml b/variables.yml index 44d737fc..46fdb5b6 100644 --- a/variables.yml +++ b/variables.yml @@ -4,6 +4,6 @@ release: '8.4.10-10' version: '8.4' vers: '8.4' # we are going to use it instead of version pkg: 'pxc-84-lts' -release_date: '2026-07-' -title_date: '2026-07-' +release_date: '2026-07-23' +title_date: '2026-07-23' From 2734784bed46c5eab01391a768bf298958040293 Mon Sep 17 00:00:00 2001 From: Alina Derkach Date: Wed, 22 Jul 2026 15:32:17 +0200 Subject: [PATCH 05/10] Update pdf_cover_page.tpl --- docs/templates/pdf_cover_page.tpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/templates/pdf_cover_page.tpl b/docs/templates/pdf_cover_page.tpl index 6b421f87..4154d09d 100644 --- a/docs/templates/pdf_cover_page.tpl +++ b/docs/templates/pdf_cover_page.tpl @@ -7,5 +7,5 @@ {% if config.site_description %}

{{ config.site_description }}

{% endif %} -

8.4.10-10 (July , 2026)

+

8.4.10-10 (July 23, 2026)

From a0e62b58cada34ee1bf98f8c3c6c945eca04c39b Mon Sep 17 00:00:00 2001 From: Alina Derkach Date: Wed, 22 Jul 2026 15:32:31 +0200 Subject: [PATCH 06/10] Update release-notes_index.md --- docs/release-notes/release-notes_index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/release-notes/release-notes_index.md b/docs/release-notes/release-notes_index.md index abbda3af..ca0bb904 100644 --- a/docs/release-notes/release-notes_index.md +++ b/docs/release-notes/release-notes_index.md @@ -1,6 +1,6 @@ # Percona XtraDB Cluster {{vers}} release notes index -* [Percona XtraDB Cluster 8.4.10-10 (2026-07-)](8.4.10-10.md) +* [Percona XtraDB Cluster 8.4.10-10 (2026-07-23)](8.4.10-10.md) * [Percona XtraDB Cluster 8.4.8-8 (2026-04-15)](8.4.8-8.md) From 322cab2ff34409fb423f9db1babe91628536b881 Mon Sep 17 00:00:00 2001 From: Alina Derkach Date: Mon, 27 Jul 2026 15:45:48 +0200 Subject: [PATCH 07/10] Update 8.4.10-10.md --- docs/release-notes/8.4.10-10.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/release-notes/8.4.10-10.md b/docs/release-notes/8.4.10-10.md index 32405fb4..4caf3509 100644 --- a/docs/release-notes/8.4.10-10.md +++ b/docs/release-notes/8.4.10-10.md @@ -1,4 +1,4 @@ -# Percona XtraDB Cluster 8.4.10-10 (2026-07-23) +# Percona XtraDB Cluster 8.4.10-10 (2026-07-27) !!! note "" @@ -86,6 +86,8 @@ This release addresses the following security vulnerabilities: * [PXC-5229](https://perconadev.atlassian.net/browse/PXC-5229): Fixed an issue where `WSREP` applier threads could inherit `tx_read_only=true`, causing replication failures and node inconsistency. +* PXC-5209: Fixed an issue where a corrupted Galera cache could cause the server to exit during startup. + ## Builds and packaging * Percona XtraDB Cluster 8.4.10-10 adds support for Ubuntu 26.04. From cf896857f69bfd7cabb2edba5aa83cfaa956908e Mon Sep 17 00:00:00 2001 From: Alina Derkach Date: Mon, 27 Jul 2026 15:46:08 +0200 Subject: [PATCH 08/10] Update release-notes_index.md --- docs/release-notes/release-notes_index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/release-notes/release-notes_index.md b/docs/release-notes/release-notes_index.md index ca0bb904..5b7fcbc5 100644 --- a/docs/release-notes/release-notes_index.md +++ b/docs/release-notes/release-notes_index.md @@ -1,6 +1,6 @@ # Percona XtraDB Cluster {{vers}} release notes index -* [Percona XtraDB Cluster 8.4.10-10 (2026-07-23)](8.4.10-10.md) +* [Percona XtraDB Cluster 8.4.10-10 (2026-07-27)](8.4.10-10.md) * [Percona XtraDB Cluster 8.4.8-8 (2026-04-15)](8.4.8-8.md) From b8b491db3f00f9e64818fe7197719ff326ec1407 Mon Sep 17 00:00:00 2001 From: Alina Derkach Date: Mon, 27 Jul 2026 15:46:23 +0200 Subject: [PATCH 09/10] Update pdf_cover_page.tpl --- docs/templates/pdf_cover_page.tpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/templates/pdf_cover_page.tpl b/docs/templates/pdf_cover_page.tpl index 4154d09d..7ef772b8 100644 --- a/docs/templates/pdf_cover_page.tpl +++ b/docs/templates/pdf_cover_page.tpl @@ -7,5 +7,5 @@ {% if config.site_description %}

{{ config.site_description }}

{% endif %} -

8.4.10-10 (July 23, 2026)

+

8.4.10-10 (July 27, 2026)

From d9589af140c49dc9f4358de305b07ebfbdf4d6de Mon Sep 17 00:00:00 2001 From: Alina Derkach Date: Mon, 27 Jul 2026 15:46:42 +0200 Subject: [PATCH 10/10] Update variables.yml --- variables.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/variables.yml b/variables.yml index 46fdb5b6..f5429c50 100644 --- a/variables.yml +++ b/variables.yml @@ -4,6 +4,6 @@ release: '8.4.10-10' version: '8.4' vers: '8.4' # we are going to use it instead of version pkg: 'pxc-84-lts' -release_date: '2026-07-23' -title_date: '2026-07-23' +release_date: '2026-07-27' +title_date: '2026-07-27'