We have detected vulnerabilities relating to ODBC Connectors in NFA. What are recommended versions?
Article ID: 391447
Updated On:
Products
Issue/Introduction
Our scanners have detected security vulnerabilities and we are concerned with the version numbers indicated by the tools
- MySQL ODBC Connector 8.4.0 (64-Bit)
- MySQL ODBC Connector 9.1.0 (64-Bit)
- MySQL ODBC Connector 8.0.37 (32-Bit)
- MySQL ODBC Connector 8.0.40 (32-Bit)
Resolution
There are two ODBC connectors, one being 32-bit and the other 64-bit, and NFA requires them both. The version numbers for these release can be confusing. To explain:
In in NFA 23.3.13:
64 bit release in NFA is = 8.4.0 - This tool is found in C:\Program Files\ - See release notes to mysql ODBC 64 bit release 2024-04-30
https://dev.mysql.com/doc/relnotes/connector-odbc/en/news-8-4-0.html
32 bit release in NFA is = 8.0.37 - This tool is found in C:\Program Files (x86)\ - See release notes to mysql ODBC 32 bit release notes from 2024-04-30
https://dev.mysql.com/doc/relnotes/connector-odbc/en/news-8-0-37.html
As of NFA release is 25.4.7, our current release in May 2026
64bit ODBC = version 9.6.0 (added in NFA 25.4.7 )
https://dev.mysql.com/doc/relnotes/connector-odbc/en/news-9-6-0.html from 2026-01-21
32bit ODBC = Version 8.0.37 (added in NFA 23.3.12)
https://dev.mysql.com/doc/relnotes/connector-odbc/en/news-8-0-37.html from 2024-04-30
We do not recommend manually upgrading 32bit ODBC, instead please upgrade to NFA 25.4.7+ or newer.
64 bit ODBC can not be upgraded manually.
Additional Information
Here's a link to the NFA release notes
Feedback
