BSD Ports

MariaDB -- Multiple vulnerabilities

· CVE-2026-44173, CVE-2026-44172, CVE-2026-44171, CVE-2026-44170, CVE-2026-44169, CVE-2026-44168 · VuXML entry

The MariaDB project reports: See linked CVE's for details.

Affected versions

By system

2 still vulnerable, 6 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.

SystemPortVersionStateFixed
FreeBSDdatabases/mariadb118-client11.8.9 fixed
NetBSDdatabases/mariadb118-client11.8.8nb1 not listed
MidnightBSDdatabases/mariadb118-client in range, by version
FreeBSDdatabases/mariadb114-client11.4.13 fixed
NetBSDdatabases/mariadb114-client11.4.12nb1 not listed
MidnightBSDdatabases/mariadb114-client in range, by version
FreeBSDdatabases/mariadb1011-client10.11.19 fixed
NetBSDdatabases/mariadb1011-client10.11.18nb1 not listed
DragonFlydatabases/mariadb106-client10.6.14 vulnerable since 2026-05-19
NetBSDdatabases/mariadb106-client10.6.27nb1 not listed
MidnightBSDdatabases/mariadb106-client in range, by version
FreeBSDdatabases/mariadb118-server11.8.9 fixed (98 days after)
NetBSDdatabases/mariadb118-server11.8.8nb2 not listed
MidnightBSDdatabases/mariadb118-server11.8.9 out of range, by version
FreeBSDdatabases/mariadb114-server11.4.13 fixed (98 days after)
NetBSDdatabases/mariadb114-server11.4.12nb2 not listed
MidnightBSDdatabases/mariadb114-server11.4.13 out of range, by version
FreeBSDdatabases/mariadb1011-server10.11.19 fixed (98 days after)
NetBSDdatabases/mariadb1011-server10.11.18nb2 not listed
DragonFlydatabases/mariadb106-server10.6.14 vulnerable since 2026-05-19
NetBSDdatabases/mariadb106-server10.6.27nb2 not listed
MidnightBSDdatabases/mariadb106-server10.6.28 out of range, by version