Skip to content
Percona Software for MySQL Documentation
Rate this page
☆ ☆ ☆ ☆ ☆
Thanks for your feedback
Thank you! The feedback has been submitted.

Get free database assistance or contact our experts for personalized support.

Get help from Percona

Percona XtraDB Cluster 8.0.46-38 (2026-07-23)

Percona XtraDB Cluster 8.0.46-37 was not released. We skipped this version number because security fixes addressing CVEs were added to this release.

Final 8.0 series release

Percona XtraDB Cluster 8.0.46-38 is the final release of the Percona XtraDB Cluster 8.0 series. MySQL 8.0 and Percona Server for MySQL 8.0 has reached their End of Life (EOL).

Percona offers tailored support before, during, and after your move to Percona XtraDB Cluster 8.4, and can keep your existing Percona XtraDB Cluster 8.0 deployment secure and performant post-EOL through MySQL 8.0 Post-EOL Support from Percona.

The program provides critical updates and ensures stability for businesses relying on Percona XtraDB Cluster 8.0 beyond the official EOL.

Post-EOL support subscribers can access the full release, including pre-compiled binaries, through the private repository.

Community members can build the release from publicly available source code, which is released quarterly.

Upgrading to MySQL 8.4 is recommended, but support for MySQL 8.0 will continue.

Get started with Quickstart Guide for Percona XtraDB Cluster.

Percona XtraDB Cluster is based on Percona Server for MySQL. Percona XtraDB Cluster 8.0.46-38 includes all the features and bug fixes available in Percona Server for MySQL 8.0.46-38. Find a complete list of improvements and bug fixes in the Percona Server for MySQL 8.0.46-38 (2026-06-10) release notes.

MySQL 8.0.46

Improvements and bug fixes provided by Oracle for MySQL 8.0.46 and included in Percona Server for MySQL are documented in the MySQL 8.0.46 Release Notes.

Security updates

This release addresses the following security vulnerabilities:

  • CVE-2026-48165: A vulnerability in the handling of the wsrep_sst_donor and wsrep_sst_receive_address system variables allowed a high-privileged user to execute arbitrary shell commands with the privileges of the mariadbd process during State Snapshot Transfer (SST) due to improper input sanitization (CVSS 3.1 Base Score 7.2). :contentReference[oaicite:0]{index=0}. (This fix was backported from MariaDB. Thanks to the MariaDB project for identifying and fixing this issue.)

  • CVE-2026-49261: A vulnerability in MariaDB Server with wsrep_notify_cmd enabled allowed a remote attacker to execute arbitrary shell commands by embedding commands in the name of a joiner node due to improper input sanitization (CVSS 3.1 Base Score 10.0). :contentReference[oaicite:0]{index=0}. (This fix was backported from MariaDB. Thanks to the MariaDB project for identifying and fixing this issue.)

Bug fixes

  • PXC-4683: Prevented nodes from leaving the cluster after an error in a stored procedure.

  • PXC-4799: Resolved Inconsistency errors on backup nodes when pending DDL conflicted with FLUSH TABLES WITH READ LOCK (FTWRL).

  • PXC-4805: Restored the mysqlchk script to the Percona XtraDB Cluster 8.0 package and binary tarball distributions.

  • PXC-4825: Added wsrep threads to performance_schema.variables_by_thread.

  • PXC-4844: Prevented inconsistency voting under high load from triggering an internal deadlock that permanently paused Flow Control.

  • PXC-4849: Allowed nodes with Event Scheduler tasks and read_only enabled to join the cluster after a successful State Snapshot Transfer (SST).

  • PXC-4887: Ensured CREATE ROLE statements were replicated when the validate password plugin was enabled.

  • PXC-4963: Aligned GRANT privileges between in-place upgraded and newly installed Percona XtraDB Cluster instances.

  • PXC-4965: Prevented nodes from leaving the cluster when SET PASSWORD included a single quote (for example, SET PASSWORD="a'b").

  • PXC-5099: Prevented SELECT ... FOR UPDATE SKIP LOCKED from triggering a fatal InnoDB error and crashing the node under concurrent transactional workloads.

  • PXC-5209: Prevented corrupted Galera gcache files during node restart with gcache.recover=yes from causing out-of-memory conditions or std::bad_alloc crashes.

  • PXC-5229: Prevented WSREP applier threads from inheriting tx_read_only=true, which had caused replication failures and node inconsistency.

  • PXC-5240: Sanitized peer-supplied fields in wsrep_notify_cmd before shell substitution, closing a path for malicious joiners to execute arbitrary commands on the donor.

  • PXC-5241: Validated wsrep_sst_receive_address values on the joiner side to prevent shell injection during State Snapshot Transfer (SST).

Packaging and builds

Percona XtraDB Cluster 8.0.46-38 adds support for Ubuntu 26.04.

Additional resources

Download product binaries, packages, and tarballs at Percona Product Downloads

Install Percona XtraDB Cluster

The Percona XtraDB Cluster GitHub repository

Contribute to the documentation

For training, contact Percona Training - Start learning now.