CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

databases/mysql97-client9.7.2

Multithreaded SQL database (client)

Maintainer
joneum@FreeBSD.org
Packages
mysql97-client 9.7.2
Upstream
Higher version available: 26.10.0
CPE
oracle:mysql from the port
WWW
https://www.mysql.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (1)

VuXML entries whose affected range this version has left.

CVE-2026-46936, CVE-2026-47008, CVE-2026-47012, CVE-2026-47023, CVE-2026-47052, CVE-2026-47064, CVE-2026-60145, CVE-2026-60163, CVE-2026-60174, CVE-2026-60177, CVE-2026-60178, CVE-2026-60181, CVE-2026-60182, CVE-2026-60183, CVE-2026-60184, CVE-2026-60185, CVE-2026-60186, CVE-2026-60187, CVE-2026-60188, CVE-2026-60189, CVE-2026-60190, CVE-2026-60191, CVE-2026-60194, CVE-2026-60195, CVE-2026-60311, CVE-2026-60314, CVE-2026-60315, CVE-2026-60316, CVE-2026-60324, CVE-2026-60331, CVE-2026-60332, CVE-2026-60585, CVE-2026-60718, CVE-2026-60725, CVE-2026-60747, CVE-2026-61081, CVE-2026-61093, CVE-2026-61094, CVE-2026-61096, CVE-2026-61108, CVE-2026-61109, CVE-2026-61128, CVE-2026-61144

Commits (6)

Jochen Neumeister (joneum) · 9.7.2
databases/mysql97-client: Add maintainer note per new ports policy

The maintainer load and port lifecycle policy only excludes a port from the
outdated ratio when the reason is documented in the port itself:

	https://wiki.freebsd.org/Ports/MaintainerLoadAndPortLifecyclePolicy

This is a slave port of databases/mysql97-server, but repology counts it as a
package of its own. At the time of writing it lists 26.7.0 as the newest MySQL
and reports this port as outdated, although it carries 9.7.2, the latest
release of the series it tracks. Refer to the note in the master port instead
of repeating it here.

No functional change, comment only.

Sponsored by:	Netzkommune GmbH
cbb55a18b8
Jochen Neumeister (joneum)
databases/mysql97-{client,server}: Update to 9.7.2

This release contains the security fixes of the Oracle Critical
Patch Update of July 2026. 43 of the 54 MySQL issues apply to the
9.7 series and to the MySQL Router built from this port.

Drop patch-libs_mysql_gtid_tag__plain.h, the type_traits include
is upstream as of 9.7.2.

Changes:
https://dev.mysql.com/doc/relnotes/mysql/9.7/en/news-9-7-2.html

Security:	10f5f76e-90a5-11f1-bc30-3497f65b111b
Sponsored by:	Netzkommune GmbH
e04b81ba66
Jochen Neumeister (joneum)
databases/mysql{84,97}: Install man pages, clean up dependencies

Re-enable installation of the man pages shipped in the source tarball
and register them in pkg-plist, split between the client and server
packages. Same approach as databases/mysql80-client in PR 279234.

Rework the dependencies based on actual linkage: libfido2 is only used
by the client, curl, icu and liblz4 only by the server. Drop libhidapi
entirely, it is a transitive dependency of libfido2.

While here, fix the CONFLICTS_INSTALL pattern of mysql84-client not
matching mysql80-client and update the mysql84 pkg-message.

Sponsored by:	Netzkommune GmbH
273edb702d
Jochen Neumeister (joneum)
databases/mysql97: Fix build with llvm 21, directory ownership and cleanup

- Add upstream patches for missing #include <type_traits> and <cstdlib>,
  fixing the build with clang/libc++ 21 [1] [2]
- Register MY_SECDIR and MY_TMPDIR with mysql:mysql 0750 in pkg-plist,
  so mysqld no longer fails to start after package upgrades reset the
  ownership to root [3]
- Fix CONFLICTS_INSTALL pattern in the client not matching
  mysql80-client
  and align it with the wildcard style used by the server
- Update pkg-message for 9.x: mysql_upgrade no longer exists, the server
  performs upgrade tasks itself; fix version reference and quoting
- Drop duplicate -DWITH_LZ4=system, remove a stale line continuation,
  whitespace fixes
- Rename patch-sql_server_component_mysql__file__imp.cc to follow the
  patch naming convention

PR:		296439 [1], 296443 [2], 296758 [3]
Reported by:	Trond Endrestøl [1] [2], Alexander Ushakov [3]

sponsored by:	Netzkommune GmbH
95fe3eb151
Bernhard Froehlich (decke)
databases/mysql97-client: Fix CPE information
0c554b22cc
Jochen Neumeister (joneum)
databases/mysql97-{server|client}: add new Ports

Welcome MySQL 9.7 - the LTS Version from MySQL 9

What is new in MySQL9.7: https://dev.mysql.com/doc/relnotes/mysql/9.7/en/news-9-7-0.html

Sponsored by:	Netzkommune GmbH
ee6bdb9a92