BSD Ports

MariaDB -- Multiple vulnerabilities

· CVE-2026-48165, CVE-2026-48163, CVE-2026-49261 · VuXML entry

The MariaDB project reports: Multiple vulnerabilities in MariaDB Cluster (Galera)

Affected versions

By system

1 still vulnerable, 3 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.

SystemPortVersionStateFixed
FreeBSDdatabases/mariadb118-server11.8.9 fixed (88 days after)
NetBSDdatabases/mariadb118-server11.8.8nb2 not listed
MidnightBSDdatabases/mariadb118-server11.8.9 out of range, by version
FreeBSDdatabases/mariadb114-server11.4.13 fixed (88 days after)
NetBSDdatabases/mariadb114-server11.4.12nb2 not listed
MidnightBSDdatabases/mariadb114-server11.4.13 out of range, by version
FreeBSDdatabases/mariadb1011-server10.11.19 fixed (88 days after)
NetBSDdatabases/mariadb1011-server10.11.18nb2 not listed
DragonFlydatabases/mariadb106-server10.6.14 vulnerable since 2026-05-29
NetBSDdatabases/mariadb106-server10.6.27nb2 not listed
MidnightBSDdatabases/mariadb106-server10.6.28 out of range, by version