https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:05:11.433756+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4060 ALSA-2021:4060 — Moderate: libsolv security update 2026-10-02T14:05:11.673054+00:00

Affected: AlmaLinux:8: libsolv-devel, AlmaLinux:8: libsolv-tools

The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm.

Security Fix(es):

* libsolv: heap-based buffer overflow in pool_installable() in src/repo.h (CVE-2021-33928)

* libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h (CVE-2021-33929)

* libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h (CVE-2021-33930)

* libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c (CVE-2021-33938)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-01803 bdu:2022-01803 2026-10-02T14:05:11.673116+00:00 bdu:2022-01803 https://cve.radiocsirt.org/vuln/certfr-2022-avi-386 certfr-2022-avi-386 — De multiples vulnérabilités ont été découvertes dans IBM QRadar SIEM. Certaines d'entre elles permettent à un attaquant… 2026-10-02T14:05:11.673134+00:00 certfr-2022-avi-386 https://cve.radiocsirt.org/vuln/cnvd-2021-69608 cnvd-2021-69608 2026-10-02T14:05:11.673151+00:00 cnvd-2021-69608 https://cve.radiocsirt.org/vuln/euvd-2026-28625 EUVD-2026-28625 2026-10-02T14:05:11.673163+00:00 EUVD-2026-28625 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33929 fkie_cve-2021-33929 2026-10-02T14:05:11.673174+00:00

Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

 https://cve.radiocsirt.org/vuln/ghsa-28q6-prfq-9g82 GHSA-28q6-prfq-9g82 2026-10-02T14:05:11.673194+00:00

Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.

 https://cve.radiocsirt.org/vuln/gsd-2021-33929 gsd-2021-33929 2026-10-02T14:05:11.673208+00:00 gsd-2021-33929 https://cve.radiocsirt.org/vuln/msrc_cve-2021-33929 msrc_CVE-2021-33929 — Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attacker… 2026-10-02T14:05:11.673218+00:00 msrc_CVE-2021-33929 https://cve.radiocsirt.org/vuln/rhsa-2021:4060 RHSA-2021:4060 — Red Hat Security Advisory: libsolv security update 2026-10-02T14:05:11.673235+00:00

libsolv: heap-based buffer overflow in pool_installable() in src/repo.h libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c

 https://cve.radiocsirt.org/vuln/rhsa-2022:5498 RHSA-2022:5498 — Red Hat Security Advisory: Satellite 6.11 Release 2026-10-02T14:05:11.673265+00:00

libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c foreman: Authenticate remote code execution through Sendmail configuration Satellite: Allow unintended SCA certificate to authenticate Candlepin netty: Information disclosure via the local system temporary directory netty: possible request smuggling in HTTP/2 due missing validation netty: Request smuggling via content-length header sidekiq: XSS via the queue name of the live-poll feature python-sqlparse: ReDoS via regular expression in StripComments filter libsolv: heap-based buffer overflow in pool_installable() in src/repo.h libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c rubygem-puma: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma logback: remote code execution through JNDI call from within its configuration file netty: control chars in header names may lead to HTTP request smuggling python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through django: potential bypass of an upstream access control based on URL paths libsolv: heap-overflows in resolve_dependencies function django: Denial-of-service possibility in UserAttributeSimilarityValidator django: Potential information disclosure in dictsort template filter django: Potential directory-traversal via Stor…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-33929 UBUNTU-CVE-2021-33929 2026-10-02T14:05:11.673364+00:00

Affected: Ubuntu:Pro:16.04:LTS: libsolv, Ubuntu:Pro:18.04:LTS: libsolv, Ubuntu:20.04:LTS: libsolv

Buffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service.