BSD PortsMySQL -- Multiple vulnerabilities
· CVE-2025-15467, CVE-2026-34270, CVE-2026-34271, CVE-2026-34276, CVE-2026-34308, CVE-2026-22009, CVE-2026-22017, CVE-2026-34272, CVE-2026-34303, CVE-2025-14017, CVE-2026-34318, CVE-2026-34317, CVE-2026-34319, CVE-2026-22004, CVE-2026-34304, CVE-2026-35236, CVE-2026-35237, CVE-2026-35238, CVE-2026-34293, CVE-2026-35239, CVE-2026-35235, CVE-2026-21998, CVE-2026-22005, CVE-2026-22002, CVE-2026-34267, CVE-2026-34278, CVE-2026-35240, CVE-2026-35234, CVE-2026-22015, CVE-2026-22001 · VuXML entry
Oracle reports: See linked CVE's for details.
Affected versions
- mysql80-client < 8.0.46
- mysql84-client < 8.4.9
- mysql96-client < 9.6.1
- mysql80-server < 8.0.46
- mysql84-server < 8.4.9
- mysql96-server < 9.6.1
By system
2 still vulnerable, 4 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | databases/mysql80-client | 8.0.46 | fixed | |
| NetBSD | databases/mysql80-client | 8.0.46 | not listed | |
| MidnightBSD | databases/mysql80-client | in range, by version | ||
| DragonFly | databases/mysql80-client | 8.0.41 | vulnerable since 2026-05-19 | |
| FreeBSD | databases/mysql84-client | 8.4.11_1 | fixed | |
| MidnightBSD | databases/mysql84-client | in range, by version | ||
| FreeBSD | databases/mysql80-server | 8.0.46_3 | fixed | |
| NetBSD | databases/mysql80-server | 8.0.46nb1 | not listed | |
| MidnightBSD | databases/mysql80-server | 8.0.46 | out of range, by version | |
| DragonFly | databases/mysql80-server | 8.0.41 | vulnerable since 2026-05-19 | |
| FreeBSD | databases/mysql84-server | 8.4.11_4 | fixed | (78 days after) |
| MidnightBSD | databases/mysql84-server | 8.4.11 | out of range, by version |