CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

databases/mysql84-server8.4.11_4

Multithreaded SQL database (server)

Maintainer
joneum@FreeBSD.org
Packages
mysql84-server 8.4.11_4
Upstream
Higher version available: 26.10.0
CPE
oracle:mysql_server from the port
WWW
https://www.mysql.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (4)

Show 4 fixed
VuXML entries whose affected range this version has left.

CVE-2026-46936, CVE-2026-47012, CVE-2026-47023, CVE-2026-47052, CVE-2026-47064, CVE-2026-60145, CVE-2026-60163, CVE-2026-60177, CVE-2026-60178, CVE-2026-60182, CVE-2026-60183, CVE-2026-60184, CVE-2026-60185, CVE-2026-60186, CVE-2026-60187, CVE-2026-60188, CVE-2026-60189, CVE-2026-60190, CVE-2026-60191, CVE-2026-60314, CVE-2026-60315, CVE-2026-60316, CVE-2026-60331, CVE-2026-60332, CVE-2026-60585, CVE-2026-60725, CVE-2026-60747, CVE-2026-61081, CVE-2026-61094, CVE-2026-61096, CVE-2026-61109

CVE-2025-14017, CVE-2025-15467, CVE-2026-21998, CVE-2026-22001, CVE-2026-22002, CVE-2026-22004, CVE-2026-22005, CVE-2026-22009, CVE-2026-22015, CVE-2026-22017, CVE-2026-34267, CVE-2026-34270, CVE-2026-34271, CVE-2026-34272, CVE-2026-34276, CVE-2026-34278, CVE-2026-34293, CVE-2026-34303, CVE-2026-34304, CVE-2026-34308, CVE-2026-34317, CVE-2026-34318, CVE-2026-34319, CVE-2026-35234, CVE-2026-35235, CVE-2026-35236, CVE-2026-35237, CVE-2026-35238, CVE-2026-35239, CVE-2026-35240

Commits (20)

Jochen Neumeister (joneum) · 8.4.11_4
databases/mysql84-{client,server}: Fix MySQL Router plugin loading

MySQL Router fails to start when the configuration contains an
[http_server] section, as generated by mysqlsh:

  Error: Loading plugin for config-section '[http_server]' failed:
  libmysqlrouter_http_server.so.1: No space available for static
  Thread Local Storage

Upstream compiles with -ftls-model=initial-exec, so router libraries
loaded through dlopen(3) have to be placed in the static TLS block.
libmysqlrouter_http_server.so.1 needs 272 bytes and libmysqlharness.so.1
another 32, while rtld reserves 128 bytes for objects loaded later.
The five rest_* plugins depend on http_server and fail along with it.

PR:		298483
Reported by:	marko.cupac@mimar.rs
Sponsored by:	Netzkommune GmbH
7598ff207e
Jochen Neumeister (joneum) · 8.4.11_3
databases/mysql*-server: make the rc script service jail aware

Set a default of net_basic for the service jail options, so mysqld
can use IPv4/IPv6 when it is started in a service jail. The default
can be overridden via rc.conf.

PR:		279672
Sponsored by:	Netzkommune GmbH
443408a666
Jochen Neumeister (joneum) · 8.4.11_2
databases/mysql{80,84,97}-server: Fix build on CPUs without SSE4.2

The crc32 code declares target("sse4.2"), but the _mm_crc32_* intrinsics
require the crc32 feature. With -mno-crc32, as emitted by -march=native
on a CPU without the instruction, sse4.2 no longer implies crc32 and the
build fails. Declare crc32 instead, including the two flatten wrappers that
inline those intrinsics.

PR:		275404
Sponsored by:	Netzkommune GmbH
3c9444219a
Jochen Neumeister (joneum) · 8.4.11_2
databases/mysql{80,84,97}-server: Add rc script and user for MySQL Router

All three server ports build and install MySQL Router, but it was never
usable out of the box: there is no mysqlrouter user, no rc script, no
configuration directory, and no log, runtime or data directory. The only
trace of an integration was etc/logrotate.d/mysqlrouter, whose
"create 600 mysqlrouter mysqlrouter" refers to an account that no port
creates, so logrotate(8) skipped that entry with an error and exited
non-zero.

Upstream names that account itself: scripts/CMakeLists.txt sets
MYSQLROUTER_USER to "mysqlrouter", the built-in help of mysqlrouter
suggests --user=mysqlrouter, and the systemd unit shipped for Linux runs
the service under it.

Add the user and group, an rc script, and a configuration sample in
etc/mysqlrouter. mysqlrouter does not detach itself, so it runs under
daemon(8), which also writes the PID file that the postrotate script in
etc/logrotate.d/mysqlrouter expects. The runtime, log and data
directories
are created by the rc script, and only when they are missing, so a host
that already runs MySQL Router under a different account keeps working
untouched. This matches the init script in upstream's own packaging.

The service is off by default.

PR:		253245
Sponsored by:	Netzkommune GmbH
3f2328fca5
Jochen Neumeister (joneum) · 8.4.11_1
databases/mysql*-server: Fix plist issue

Move LICENSE.router and README.router from ${PREFIX} to ${DOCSDIR},
where they belong according to hier(7).

PR:		290283
Reported by:	se
Sponsored by:	Netzkommune GmbH
b32bea4a27
Jochen Neumeister (joneum) · 8.4.11
databases/mysql84-{client,server}: Update to 8.4.11

This release contains the security fixes of the Oracle Critical
Patch Update of July 2026. 31 of the 54 MySQL issues apply to the
8.4 series and to the MySQL Router built from this port.

Changes:
https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-11.html

Security:	10f5d195-90a5-11f1-bc30-3497f65b111b
Sponsored by:	Netzkommune GmbH
335950b823
Jochen Neumeister (joneum) · 8.4.10_1
databases/mysql{84,97}: Install man pages, clean up dependencies

Re-enable installation of the man pages shipped in the source tarball
and register them in pkg-plist, split between the client and server
packages. Same approach as databases/mysql80-client in PR 279234.

Rework the dependencies based on actual linkage: libfido2 is only used
by the client, curl, icu and liblz4 only by the server. Drop libhidapi
entirely, it is a transitive dependency of libfido2.

While here, fix the CONFLICTS_INSTALL pattern of mysql84-client not
matching mysql80-client and update the mysql84 pkg-message.

Sponsored by:	Netzkommune GmbH
273edb702d
Jochen Neumeister (joneum) · 8.4.10
databases/mysql84-{server|client}: Update to 8.4.10

Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-10.html

Sponsored by:	Netzkommune GmbH
b59536c498
Bernhard Froehlich (decke) · 8.4.9
databases/mysql84-server: Fix CPE information
733f906a7f
Jochen Neumeister (joneum) · 8.4.9
databases/mysql84-{server|client}: Update to 8.4.9

Bugs Fixed

    Fixed an issue relating to Information Schema privileges. (Bug

    The SQL parser consumed a large amount of memory when parsing very
large queries with many large IN clauses.

    As of this release, the SQL parser's memory management has been
improved. (Bug #105004, Bug #33390851)

Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-9.html

Sponsored by:	Netzkommune GmbH
1b42326479
Jochen Neumeister (joneum) · 8.4.8
databases/mysql84-{server|client}: Update to 8.4.8

Bugs Fixed

    InnoDB: Under certain circumstances, when using the que_eval_sql
interface, a race condition could occur. (Bug #118705, Bug #38310595)

    Running SET PERSIST on a system variable after an upgrade can result
in duplicate variable entries across different sections in
mysqld-auto.cnf. (Bug #38680162)

    Binary log purged before persisted binlog_expire_* options were
loaded. (Bug #38554467)

    When 2 of 6 instances in a geographically dispersed InnoDB Cluster
lost connectivity, the primary server became unresponsive, causing the
COMMIT and INSERT operations to become unresponsive as well. (Bug

    mysqldump's --order-by-primary option sorted data by every index on
the table, instead of just sorting by the primary key. (Bug #38284832)

    Fixed several issues relating to Thread Pool blocking connections
from closing. (Bug #38170188, Bug #36782728, Bug #38549372)

    GTID gaps were generated because of the replica- skip-errors option.
(Bug #28590993)

    If server was started on Windows platforms with --skip-grant-tables,
privileges were not checked and remote connections were not permitted.
As a result, the server might not start. (Bug #118805, Bug #38328780)

PR:	292705
Sponsored by:	Netzkommune GmbH
f6ac00ae61
Jochen Neumeister (joneum) · 8.4.7
databases/mysql84-{server|client}: Update to 8.4.7

Changelog:
https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-6.html
https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-7.html

Sponsored by:	Netzkommune GmbH
aba399e1be
Jochen Neumeister (joneum) · 8.4.5
databases/mysql84-{server|client}: Update to 8.4.5

Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/

Reported by:	Christos Chatzaras (chris@cretaforce.gr) via private
eMail

Sponsored by:	Netzkommune GmbH
4d4dc7193d
Daniel Engberg (diizzy) · 8.4.3_1
*/*: Bump consumers of devel/icu

...to avoid library mismatches
ff33dd4700
Jochen Neumeister (joneum) · 8.4.3
databases/mysql84-{server|client}: Update to 8.4.3

Changelog: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-3.html

PR:	283752
Sponsored by:	Netzkommune GmbH
56b89132b2
Jochen Neumeister (joneum) · 8.4.2_1
databases/mysql84-server: fix build with clang and libc++ 19

As noted in the libc++ 19 release notes [1], std::char_traits<> is now
only provided for char, char8_t, char16_t, char32_t and wchar_t, and any
instantiation for other types will fail.

This causes databases/mysql84-server to fail to compile with clang 19
and libc++ 19, resulting in errors similar to:

    /usr/include/c++/v1/string:820:42: error: implicit instantiation of
undefined template 'std::char_traits<unsigned char>'
      820 |   static_assert(is_same<_CharT, typename
traits_type::char_type>::value,
          |                                          ^
    /wrkdirs/usr/ports/databases/mysql84-client/work/mysql-8.4.2/sql/rpl_log_encryption.h:821:14:
note: in instantiation of template class 'std::basic_string<unsigned
char>' requested here
      821 |   Key_string m_encrypted_password;
          |              ^
    /usr/include/c++/v1/__fwd/string.h:23:29: note: template is declared
here
       23 | struct _LIBCPP_TEMPLATE_VIS char_traits;
          |                             ^

`Key_string` is defined as `std::basic_string<unsigned char>`, which is
no longer possible. So redefine it as a `std::vector<unsigned char>`
instead.

This requires only a few small adjustments in other places: replacing
the `length()` method with the equivalent `size()` method, and adjusting
the arguments for the `assign()` method, which for `std::vector` takes a
begin and end iterator, instead of a begin iterator and a size.

Another issue is that clang 19 now implements CWG 96 [2], which requires
a template argument list after a 'template' keyword, resulting in errors
similar to:

    /wrkdirs/usr/ports/databases/mysql84-client/work/mysql-8.4.2/libs/mysql/serialization/archive.h:84:43:
error: a template argument list is expected after a name prefixed by the
template keyword [-Wmissing-template-arg-list-after-template-kw]
       84 |     return Archive_derived_type::template
get_size(std::forward<Type>(arg));
          |                                           ^
    /wrkdirs/usr/ports/databases/mysql84-client/work/mysql-8.4.2/libs/mysql/serialization/archive.h:91:43:
error: a template argument list is expected after a name prefixed by the
template keyword [-Wmissing-template-arg-list-after-template-kw]
       91 |     return Archive_derived_type::template
get_size_written();
          |                                           ^

This requires a number of adjustments to various template invocations.

[1] https://libcxx.llvm.org/ReleaseNotes/19.html#deprecations-and-removals
[2] https://www.open-std.org/jtc1/sc22/wg21/docs/cwg_defects.html#96

PR:	280695
Sponsored by:	Netzkommune GmbH
9832739877
Mikael Urankar (mikael) · 8.4.2_1
databases/mysql84-server: Fix SIGILL on aarch64

We want to check HWCAP_PMULL not HWCAP_CRC32.

Approved by:	portmgr (trivial runtime fix)
PR:		280165
90179a1242
Oleksii Samorukov (samm) · 8.4.2
databases/mysql84-server: Update to 8.4.2

- fixes multiple CVE
- fix crash on start with inndob and  very large number of tables

PR: 280456
f279c990c9
Dima Panov (fluffy) · 8.4.0
databases/mysql84-server: unbreak packaging when EXAMPLES engine is statically linked into the server

Approved by:	portmgr blanet (trivial fix)
50a030b3cd
Jochen Neumeister (joneum) · 8.4.0
databases/mysql84-{server|client}: add new Ports

Welcome MySQL 8.4

What is new in MySQL8.4 since MySQL 8.0:
https://dev.mysql.com/doc/refman/8.4/en/mysql-nutshell.html

HINT: MySQL8.2+ supports only 64-bit platforms!!!

special thanks for the majority of the work on this port: samm aka Alex
S.
3c10befc00