BSD PortsMySQL -- Multiple vulnerabilities
· CVE-2026-21949, CVE-2026-21950, CVE-2026-21968, CVE-2026-21929, CVE-2026-21936, CVE-2026-21937, CVE-2026-21941, CVE-2026-21948, CVE-2026-21952, CVE-2026-21964, CVE-2026-21965 · VuXML entry
Oracle reports: Oracle reports multiple vulnerabilities in its MySQL server products.
Affected versions
- mysql80-server < 8.0.45
- mysql84-server < 8.4.8
- mysql91-server < 9.1.3
- mysql94-server < 9.4.3
By system
1 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | databases/mysql80-server | 8.0.46_3 | fixed | |
| NetBSD | databases/mysql80-server | 8.0.46nb1 | not listed | |
| MidnightBSD | databases/mysql80-server | 8.0.46 | out of range, by version | |
| DragonFly | databases/mysql80-server | 8.0.41 | vulnerable since 2026-01-24 | |
| FreeBSD | databases/mysql84-server | 8.4.11_4 | fixed | (193 days after) |
| MidnightBSD | databases/mysql84-server | 8.4.11 | out of range, by version |