Skip to content
Percona Software for MySQL Documentation
Rate this page
☆ ☆ ☆ ☆ ☆
Thanks for your feedback
Thank you! The feedback has been submitted.

Get free database assistance or contact our experts for personalized support.

Get help from Percona

Percona XtraDB Cluster 9.7.1-1 (2026-08-)

Percona XtraDB Cluster 9.7.0-1 was not released; 9.7.1-1 is the first build in this series. This release includes enhancements and bug fixes from MySQL 9.7.0 and MySQL 9.7.1.

Percona XtraDB Cluster (PXC) supports critical business applications in both cloud and on-premises environments, including public, private, and hybrid setups. Our free, open source, enterprise-grade solution includes the high availability and security features your business requires to meet your customer expectations and business goals.

Percona XtraDB Cluster 9.7.1-1 is based on Percona Server for MySQL and includes all improvements and bug fixes available in the Percona Server for MySQL 9.7.1-1 (2026-08-05) release notes.

Release highlights

Percona Server for MySQL 9.7.1-1

Percona Server for MySQL 9.7.1-1, introduces the following new features and improvements, along with security updates and bug fixes detailed in later sections:

  • Integrates the new Key Management Interoperability Protocol (KMIP) library into the key management component.

  • Adds JSONL (JSON Lines) output format for Audit Log Filter.

  • Increases the verbosity of the data dictionary upgrade process, making it easier to diagnose issues that occur during upgrade.

  • Logs SQL statements for the Audit Log Filter table_access class and the read and insert subclasses.

  • Flushes the audit log buffer on server shutdown when the ASYNCHRONOUS logging strategy is in use, preventing the loss of buffered events.

  • Reduces memory pressure in the Audit Log Filter component caused by VFS buffering.

  • Aligns the audit_log_filter.format=NEW output between the 8.0 plugin and the 8.4 component.

  • Optimizes performance for mem_root_deque.

MySQL 9.7.1

Improvements and bug fixes provided by Oracle for MySQL 9.7.0 and included in Percona Server for MySQL are the following:

  • Connection attribute parsing could read a length-encoded size field before verifying that the complete field was present in the packet, leading to an out-of-bounds read. A size check is now performed before reading the field. (Bug #39116965)

  • A regression in row size estimation for ROW_FORMAT=COMPRESSED tables could cause CREATE TABLE to fail with Row size too large for tables that were accepted in earlier releases. (Bug #39129182, Bug #120323)

Find the complete list of bug fixes and changes in the MySQL 9.7.0 Release Notes.

Security updates

This release addresses the following Common Vulnerabilities and Exposures (CVE):

  • CVE-2026-46850: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via HTTP to compromise MySQL Shell, with potential scope change impact on additional products (CVSS 3.1 Base Score 9.9).

  • CVE-2026-46860: A vulnerability in MySQL Router allows an unauthenticated attacker with network access via HTTP to compromise MySQL Router (CVSS 3.1 Base Score 9.8).

  • CVE-2026-46861: A vulnerability in MySQL NDB Cluster (NDB Operator) allows a low-privileged attacker with network access via HTTP to access or modify critical data, with potential scope change impact (CVSS 3.1 Base Score 9.6).

  • CVE-2026-46862: A vulnerability in MySQL Router allows an unauthenticated attacker with network access via TLS to cause a hang or repeatable unexpected exit of MySQL Router (CVSS 3.1 Base Score 7.5).

  • CVE-2026-46863: A vulnerability in MySQL Server connection handling allows an unauthenticated attacker with network access via multiple protocols to cause a hang or repeatable unexpected exit of the server (CVSS 3.1 Base Score 7.5).

  • CVE-2026-46869: A vulnerability in MySQL Shell (Dump and Load) allows an unauthenticated attacker with network access to access critical data when user interaction is required (CVSS 3.1 Base Score 6.5).

  • CVE-2026-46870: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access to compromise MySQL Shell, with potential scope change impact (CVSS 3.1 Base Score 8.5).

  • CVE-2026-46871: A vulnerability in MySQL Shell (Shell for VS Code) allows a low-privileged attacker with network access via multiple protocols to access critical data (CVSS 3.1 Base Score 6.5).

  • CVE-2026-48165: A vulnerability in the handling of the wsrep_sst_donor and wsrep_sst_receive_address system variables allowed a high-privileged user to execute arbitrary shell commands with the privileges of the mariadbd process during State Snapshot Transfer (SST) due to improper input sanitization (CVSS 3.1 Base Score 7.2). :contentReference[oaicite:0]{index=0}. (This fix was backported from MariaDB. Thanks to the MariaDB project for identifying and fixing this issue.)

  • CVE-2026-49261: A vulnerability in MariaDB Server with wsrep_notify_cmd enabled allowed a remote attacker to execute arbitrary shell commands by embedding commands in the name of a joiner node due to improper input sanitization (CVSS 3.1 Base Score 10.0). :contentReference[oaicite:0]{index=0}. (This fix was backported from MariaDB. Thanks to the MariaDB project for identifying and fixing this issue.)

Improvement

  • PXC-5195: Removes obsolete configuration variables (wsrep-slave-FK-checks, wsrep-slave-UK-checks, wsrep-causal-reads) from Percona XtraDB Cluster 9.7.1-1.

Bug fixes

  • PXC-4683: Fixed an issue where a node could leave the cluster after an error in a stored procedure.

  • PXC-4799: Fixed an issue where a backup node could fail with an Inconsistency error when a pending DDL operation conflicted with FLUSH TABLES WITH READ LOCK (FTWRL).

  • PXC-4805: The mysqlchk script was missing from the Percona XtraDB Cluster 8.4 package and binary tarball distributions.

  • PXC-4825: Fixed an issue where performance_schema.variables_by_thread did not include wsrep threads.

  • PXC-4844: Fixed an issue where inconsistency voting under high load could trigger an internal deadlock and permanently pause Flow Control.

  • PXC-4849: Fixed an issue where a node could fail to join the cluster after a successful State Snapshot Transfer (SST) because of an Event Scheduler task and the read_only setting.

  • PXC-4887: Fixed an issue where CREATE ROLE statements were not replicated when the validate password plugin was enabled.

  • PXC-4963: Fixed an issue where GRANT privileges differed between in-place upgraded and newly installed Percona XtraDB Cluster instances.

  • PXC-5233: Fixed an issue where the Percona XtraDB Cluster 9.7 entrypoint invoked the removed mysql_upgrade binary, causing an unexpected exit loop during rolling upgrades from Percona XtraDB Cluster 8.4.

  • PXC-5229: Fixed an issue where WSREP applier threads could inherit tx_read_only=true, causing replication failures and node inconsistency.

  • PXC-5230: Fixed potentially dangling pointer existence at the end of sst_joiner_thread().

  • PXC-5282: Fixed an issue where upgrading from Percona XtraDB Cluster 8.4 to 9.7 did not fully update the mysql.pxc.sst.role table, which could cause clone State Snapshot Transfer (SST) operations to fail.

  • PXC-5209: Fixed an issue where a corrupted Galera cache could cause the server to exit during startup.

  • PXC-5244: Changes the default XtraBackup locking mode to lock-ddl=ON during State Snapshot Transfer (SST).

Builds and packaging

  • Percona XtraDB Cluster uses Profile-Guided Optimization (PGO) builds to improve runtime performance. PGO uses profiling data from representative workloads to guide compiler optimizations, which can improve throughput and reduce latency. Percona XtraDB Cluster packages are built with PGO enabled.

    See Profile-Guided Optimization (PGO) and non-PGO builds for more information about PGO benefits and considerations.

  • In Percona Server for MySQL 9.7.1-1 only, Debian and Ubuntu (APT) packaging was reorganized to align more closely with upstream MySQL. Several packages were split into separate components, which may affect upgrades and dependency resolution compared with earlier Percona Server releases. The APT packages are:

    • percona-server-client-core
    • percona-server-client-plugins
    • percona-server-client
    • percona-server-common
    • percona-server-server-core
    • percona-server-server
    • percona-telemetry-agent