https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:05:41.404466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:5500 ALSA-2020:5500 — Important: mariadb:10.3 security, bug fix, and enhancement update 2026-10-03T10:05:41.537138+00:00

Affected: AlmaLinux:8: Judy

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: mariadb (10.3.27), galera (25.3.31). (BZ#1899082, BZ#1899086)

Security Fix(es):

* mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

* mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

* mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

* mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

* mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

* mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

* mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

* mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

* mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

For more details about the security issue(s), including the impact, a CVSS score, acknowle…

 https://cve.radiocsirt.org/vuln/bell-cve-2020-13249 Withdrawn: BELL-CVE-2020-13249 — CVE-2020-13249 does not affect BellSoft software 2026-10-03T10:05:41.537260+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2021-27939 cnvd-2021-27939 2026-10-03T10:05:41.537282+00:00 cnvd-2021-27939 https://cve.radiocsirt.org/vuln/euvd-2026-41606 EUVD-2026-41606 2026-10-03T10:05:41.537296+00:00 EUVD-2026-41606 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13249 fkie_cve-2020-13249 2026-10-03T10:05:41.537307+00:00

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.

 https://cve.radiocsirt.org/vuln/ghsa-44c7-hc99-224f GHSA-44c7-hc99-224f 2026-10-03T10:05:41.537330+00:00

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a client. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.

 https://cve.radiocsirt.org/vuln/gsd-2020-13249 gsd-2020-13249 2026-10-03T10:05:41.537344+00:00 gsd-2020-13249 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0738-1 openSUSE-SU-2020:0738-1 — Security update for mariadb-connector-c 2026-10-03T10:05:41.537355+00:00

Security update for mariadb-connector-c

 https://cve.radiocsirt.org/vuln/rhsa-2020:4174 RHSA-2020:4174 — Red Hat Security Advisory: rh-mariadb102-mariadb and rh-mariadb102-galera security and bug fix update 2026-10-03T10:05:41.537372+00:00

mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) mysql: InnoDB unspecified vulnerability (CPU Apr 2019) mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) mysql: Server: XML unspecified vulnerability (CPU Jul 2019) mysql: InnoDB unspecified vulnerability (CPU Jul 2019) mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) mysql: InnoDB unspecified vulnerability (CPU Oct 2019) mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) mysql: C API unspecified vulnerability (CPU Jan 2020) mysql: C API unspecified vulnerability (CPU Apr 2020) mysql: InnoDB unspecified vulnerability (CPU Apr 2020) mysql: Server: DML unspecified vulnerability (CPU Apr 2020) mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) mysql: InnoDB unspecified vulnerability (CPU Apr 2020) mysql: C API unspecified vulnerability (CPU Apr 2020) mariadb-connector-c: Improper validation of content in a OK packet received from server

 https://cve.radiocsirt.org/vuln/suse-ru-2023:3956-1 SUSE-RU-2023:3956-1 — Recommended update for mariadb104 2026-10-03T10:05:41.537422+00:00

Recommended update for mariadb104

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13249 UBUNTU-CVE-2020-13249 2026-10-03T10:05:41.537581+00:00

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3

libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.