sysown/proxysql v2.7.4 on GitHub

ProxySQL 2.7.4 Release Notes

Release date: 2026-10-20

ProxySQL 2.7.4 is a security and bug-fix release for the 2.7 series. Users of earlier 2.7 versions should upgrade.

Compared to version 2.7.3, ProxySQL 2.7.4 introduces the following changes:

Security fixes

The following fixes harden MySQL authentication, PROXY protocol parsing, compressed packets, and prepared statements. See #6475.

Advisory	Severity	Fix
GHSA-58ww-865x-grpr (CVE-2026-48773)	Critical	Bound the first MySQL packet read by the remaining receive-buffer capacity to prevent a pre-authentication heap overflow.
GHSA-gw94-85m2-x8v2 (CVE-2026-48772)	Critical	Ignore address fields in PROXY protocol v1 `UNKNOWN` headers so they cannot spoof the client address used by access rules and logs.
GHSA-7r26-v5rr-ccj5	Moderate	Bound PROXY protocol v1 address parsing to prevent a stack-buffer overflow.
GHSA-24vm-gh4h-hfr3	High	Validate handshake field lengths and terminators before reading usernames, authentication data, and plugin names.
GHSA-x23w-3v26-vgvj	Moderate	Bound length-encoded integer reads in authentication, prepared-statement parameters, and cached results.
GHSA-fvch-fpgq-pwfx (CVE-2026-102664)	High	Validate decompressed packet lengths before using their contents.
GHSA-8mqj-34cf-rj43	High	Validate `COM_CHANGE_USER` fields and remove the fixed-size authentication-response buffer.
GHSA-r23x-jg5r-jmcc	High	Check each `COM_STMT_EXECUTE` parameter against the remaining packet bytes.
GHSA-g732-36xh-4442	High	Reject truncated `COM_STMT_SEND_LONG_DATA` packets before subtracting header lengths.
GHSA-hhq3-jjcq-j897	High	Validate the packet length before reading the `COM_STMT_CLOSE` statement identifier.
GHSA-crwq-rcqp-v8jr	High	Enforce the disabled-by-default `LOAD DATA LOCAL INFILE` policy on prepared statements, including comment-prefixed statements and `LOAD XML LOCAL INFILE`.
GHSA-85h9-mr8r-6j4j	Moderate	Validate the packet length before reading the `COM_STMT_RESET` statement identifier.
GHSA-5cf5-7gfq-rrj6	Moderate	Validate the packet length before reading the `COM_STMT_EXECUTE` statement identifier.
GHSA-qg2m-q3ch-cg9v	Moderate	Reassemble inner MySQL headers split across compressed frames without aborting the process.
GHSA-p5xc-69qx-m4q5	High	Check that the `COM_STMT_EXECUTE` parameter-type array fits inside the packet before reading it.

Also reject inconsistent compressed-packet lengths before copying data in the uncompressed fallback, preventing a heap-buffer overflow, and reject fallback bodies shorter than the three-byte length field read by the parser.

Bug fixes

Free COM_STMT_EXECUTE packets exactly once when ProxySQL responds without executing on a backend, including query-rule responses, oversized packets, and hostgroup-lock errors. Also fix packet and long-data ownership on malformed execute paths. See #6515, #6233, and #5639.
Preserve transaction state after a failed prepared-statement execution, preventing a connection with an open transaction from returning to the pool and ensuring subsequent ROLLBACK commands reach the backend. See #6484 and #6481.
Restore LOAD LDAP VARIABLES TO RUNTIME by correcting command matching.
Preserve partially received MySQL and PROXY protocol headers when a subsequent nonblocking read would block, and wait for a complete PROXY protocol v1 header when it arrives across multiple reads.
Use the current client statement handle when looking up long data, so separately prepared handles for the same query do not use each other's parameter data.

Hashes

SHA256s:

42afa3711ac997eedd7e20a1393e034490ba7b96e7aae73bada1f22c64ba8c03  proxysql-2.7.4-1-almalinux8-clang.x86_64.rpm
896961b852d7b33f2374c676c75b44f83b41bd50476cf3e0fdf109acaac75857  proxysql-2.7.4-1-almalinux8.aarch64.rpm
f78732a65683ac8490b2976c6467abc20a66008e7d010bf7152dd0dec84855a5  proxysql-2.7.4-1-almalinux8.x86_64.rpm
55c18a7d2d776bd768ace44513473cb99a288d3a0a3e364d1933a91d765a6ed4  proxysql-2.7.4-1-almalinux9-clang.x86_64.rpm
fb841f2d7660160808e12e2a782a3d1778e72247a9e0c35d5dcaa93259826971  proxysql-2.7.4-1-almalinux9.aarch64.rpm
99c668c5d67c99a7bad1cc8bd7725927231f10c058708b4eb5e16dc100324097  proxysql-2.7.4-1-almalinux9.x86_64.rpm
277dc8f297736793293cbda1aa3293f31905689a453b90d2bb548e0d6fb6e78b  proxysql-2.7.4-1-centos7.aarch64.rpm
f3f9d0f87916926b39288d4d9996614ece6bfdcb12442ffee7f974062239d4a8  proxysql-2.7.4-1-centos7.x86_64.rpm
83857420804a63bbee147479d9ec5f5363969ce4ce3ad1cd3c79360fe68e3a3e  proxysql-2.7.4-1-centos8-clang.x86_64.rpm
bd82256b3ae0120375009695f62bddd8d849ebb56951c57711202f43d695d38b  proxysql-2.7.4-1-centos8.aarch64.rpm
0b56e60864ab5ae0219dbdfd093eae0f36f828869c17c300dfd5953cbb76fa8d  proxysql-2.7.4-1-centos8.x86_64.rpm
b21a63fc946627f79d9013b6a5c071b98a4daeaadab9751141445fff1b7cdf11  proxysql-2.7.4-1-centos9-clang.x86_64.rpm
c396cadec6b5237ff5e72bc3adf434925938ef752df290105d8e691cda23d320  proxysql-2.7.4-1-centos9.aarch64.rpm
8755b513d6109cf01039b3980c850f3340bfe115864d005d94172c9f4a8378b2  proxysql-2.7.4-1-centos9.x86_64.rpm
13cdcb085aa2d2d5097b1ece5be52ebef15b7001dbf9f278392ea51c157ea9ea  proxysql-2.7.4-1-dbg-almalinux8.x86_64.rpm
b891b494248a4e4e1c086efceac3a682a0c89fc4374d05d1976d3714b08df0f9  proxysql-2.7.4-1-dbg-almalinux9.x86_64.rpm
1d7008a48b700ef5088112d5ab76cdaaf5febaff609be15dc787d749dcaa62e6  proxysql-2.7.4-1-dbg-centos7.x86_64.rpm
82b2c5ac0172e38a69dc8c6e5c434ecbe3b0a198739b5dfd5c1e587f10055b12  proxysql-2.7.4-1-dbg-centos8.x86_64.rpm
dd07e4f0a6d9cde3af009f9b0d1690fd051ad3c7114ff8e92537a9459c68123b  proxysql-2.7.4-1-dbg-centos9.x86_64.rpm
49e2a121c9000b4c5fd32490d99e85ebb3f572514b97c8d8297fca857faa644f  proxysql-2.7.4-1-dbg-fedora38.x86_64.rpm
dac6dde84171d7bf78d6984578ff8283e5211758ffc305b32e8671f0d3a22b70  proxysql-2.7.4-1-dbg-fedora39.x86_64.rpm
9df594617a2d9f065a87d06c03dfa0d98d0a4aea7d0e8760764c667ee115cebe  proxysql-2.7.4-1-dbg-fedora40.x86_64.rpm
184e019dd182f27fd73b48fdea9d8539e01a15a1444acec680f1bfef3d1e49b2  proxysql-2.7.4-1-dbg-fedora41.x86_64.rpm
332c0ff9d7bee4977f9e7e7d63e3c6184e0b8cab52a19ffad847c5d5d971f946  proxysql-2.7.4-1-dbg-opensuse15.x86_64.rpm
045b44e78c58c722da3ebb3670af3a3f79217766411bcfc12b3c8ece55f2db29  proxysql-2.7.4-1-fedora38-clang.x86_64.rpm
962cb1e88ad67bbd2cd9201c72b111d06f7cf7558ad05b53c0b42149bf34cf72  proxysql-2.7.4-1-fedora38.aarch64.rpm
5c2a8ff1fcb1def1a01fd3d17c32de762be83328005976e24d1f442d766db263  proxysql-2.7.4-1-fedora38.x86_64.rpm
391d6e1afffd635bc8f04a7d048ef668a0daa569423a007eed58c35dc67305bf  proxysql-2.7.4-1-fedora39-clang.x86_64.rpm
11dbfd8a4a5f11813d24c32a903c4818b8b24e675c82a893b674bcc379548ae2  proxysql-2.7.4-1-fedora39.aarch64.rpm
8427ac5a637dd815e23b64aa64256eb19684f36d7e21f658e800f1c64db8f06d  proxysql-2.7.4-1-fedora39.x86_64.rpm
23bc17a53185140c167b5764a792ddadc779723de0f0dc2b778abe490c08f7d3  proxysql-2.7.4-1-fedora40-clang.x86_64.rpm
5c4c33df894a20b4ce54bf33216301b35d06e9d47a356c88d1ec2b40709125fb  proxysql-2.7.4-1-fedora40.aarch64.rpm
986b3de0aab659960c9814a973ee48871a92c25f887f0465bcfdee5645eb4b2c  proxysql-2.7.4-1-fedora40.x86_64.rpm
b080bc784bc8b757030c9d864076564e75e2a477d7a95059496873211be97573  proxysql-2.7.4-1-fedora41-clang.x86_64.rpm
013b9fe22557f0195db5f23d18a79b082ce5887d43127f04a7d7e1384cb9cc4f  proxysql-2.7.4-1-fedora41.aarch64.rpm
1ed01cc9c5df874d48e90ac4a12e4fbab3e27e3480e8664a6369bb4a0b901ab7  proxysql-2.7.4-1-fedora41.x86_64.rpm
373c6db8e9a64990f901a2ab31ce0b54a12c913469a65ae47c5ab51092ef592c  proxysql-2.7.4-1-opensuse15-clang.x86_64.rpm
3bf10e974e6538c2c923bc19c4a4f4fd376deab887266c455ba10d56ea30269e  proxysql-2.7.4-1-opensuse15.aarch64.rpm
422252be9ccab725f95687a150d095e4cfa3932328564fad6d39792fe8683d3f  proxysql-2.7.4-1-opensuse15.x86_64.rpm
c0bfc88bdbd04968bd1b5ecc5e00337f3c67f55d3c54c5a29308673ce1454e37  proxysql-2.7.4.id-hash
6cc61682de134cba742ffed1014b3187a9f920ce12be476e3a2444e6896936f1  proxysql_2.7.4-dbg-debian10_amd64.deb
23b258caf8b08d58a19f93e27f6c086aec3d4332a963775f2e6b7c6180a69365  proxysql_2.7.4-dbg-debian11_amd64.deb
bf49adbfde2f5e9e4cbccb90f1ca361cfef3c937a4938370eb02e101bd1df3f3  proxysql_2.7.4-dbg-debian12_amd64.deb
1a78bd53dcb28910d1c1416469254a38026bdff4bca33f350d2672e4b756d190  proxysql_2.7.4-dbg-ubuntu16_amd64.deb
ab5a9913dd24eeb9fc77797d9503df4088b6ce1d87411d6aee07827f197fe793  proxysql_2.7.4-dbg-ubuntu18_amd64.deb
ec89d9d3f81f57841ba552470049e0e7a7c8ef1541c0105ed9628a6f1eeb953f  proxysql_2.7.4-dbg-ubuntu20_amd64.deb
55b9f84f8385bccc3424ad886a3acaea239b7c981a780a147b46556ff5a37e47  proxysql_2.7.4-dbg-ubuntu22_amd64.deb
a2a2628d1b295d5ddf9f60ed9c13371497696951b84199e27338f0c8361f345d  proxysql_2.7.4-dbg-ubuntu24_amd64.deb
de4509c0c6f1ed04f748b656017eac2274a71113e73a1700b00b69358b0b1bc7  proxysql_2.7.4-debian10_amd64.deb
1e1778f197432bb74719f14fda1e53d4e2c0b022f89fdba8c3b009f12af0a91e  proxysql_2.7.4-debian10_arm64.deb
199b3b756a47114add2fe528244622299a00d4d3f0f3aa16e672ce30e12d6495  proxysql_2.7.4-debian11-clang_amd64.deb
1a10f71384af2847c29ec4a1e8ceec235d292e66177c97f032cbe1822d6d0df4  proxysql_2.7.4-debian11_amd64.deb
345b4533c76e61aee365ffbef79ba8d11f80797f0c2a8331fab263ab89bbfe93  proxysql_2.7.4-debian11_arm64.deb
5272a2bcb89b6ba6de6026dbd573d90dcfd187aa442ebb21c7689c1239839ed8  proxysql_2.7.4-debian12-clang_amd64.deb
21e864b09d8c3cb7127a0984a7842eb048fd70ff1e2ca82d77f01eb98ebd70f5  proxysql_2.7.4-debian12_amd64.deb
fb98694cccf482396f15990acdc879f818b9103a819f221b9d5f7c4262bcffdf  proxysql_2.7.4-debian12_arm64.deb
ef39dd976cb70c8412a45f0b1ac54f2ff30ca6a97da81a6968fda77d9194dd1c  proxysql_2.7.4-ubuntu16_amd64.deb
b3cd9aee934b2f53eab4e72b6780f8f727496a4bb395951a5f2285036c3df508  proxysql_2.7.4-ubuntu16_arm64.deb
3d0bfd1182ab4c673eb9b407c04383be34cfeac962e5049ba75c2e6428f23d6d  proxysql_2.7.4-ubuntu18_amd64.deb
83f591893b7d624979d7961ebe1cad4379529e4d4b3fe9c9311e79bde4ae2356  proxysql_2.7.4-ubuntu18_arm64.deb
764361ab47c37c26ec237eaedf93654b1a4f862a1b8dfe5def454f2cfaebf6d6  proxysql_2.7.4-ubuntu20-clang_amd64.deb
dfe4ebe090c9e7be8b04885cfef16ae598210827bf262e3ed8239037f644c6c5  proxysql_2.7.4-ubuntu20_amd64.deb
652e69eef10672c60f60a6effed7cf33d1b984ade8b41fc2c4fae867af043992  proxysql_2.7.4-ubuntu20_arm64.deb
0e2bbb1744a8eae25d72c81ab53c6a5045d739e0bad1baaa5c4058c091e11c73  proxysql_2.7.4-ubuntu22-clang_amd64.deb
dba6300ff595698569fb871d434b8c9705d23cf0aaa224eb9ceac9d8fc140657  proxysql_2.7.4-ubuntu22_amd64.deb
89c3cf22b8be33e8f8fdc3d2bf590b3f5915f9a7dd813746a8872ef790596eee  proxysql_2.7.4-ubuntu22_arm64.deb
b5d7f03120adad84aebafb1b6186dab26b54b1f389803ba300d77039a32d2b90  proxysql_2.7.4-ubuntu24-clang_amd64.deb
857db144e44df84f6f55e82e6a29221d52c5044525da5853bc8e212eccc24723  proxysql_2.7.4-ubuntu24_amd64.deb
43ca0b527ac447477a08a7cedcd93214c737f8e185f08c853f34fd27ef30d380  proxysql_2.7.4-ubuntu24_arm64.deb