https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:52:23.465234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:5259 ALSA-2023:5259 — Moderate: mariadb:10.3 security, bug fix, and enhancement update 2026-10-03T06:52:23.870269+00:00

Affected: AlmaLinux:8: Judy, AlmaLinux:8: galera, AlmaLinux:8: mariadb, AlmaLinux:8: mariadb-backup, AlmaLinux:8: mariadb-common, AlmaLinux:8: mariadb-devel, AlmaLinux:8: mariadb-embedded, AlmaLinux:8: mariadb-embedded-devel, AlmaLinux:8: mariadb-errmsg, AlmaLinux:8: mariadb-gssapi-server and 5 more

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: mariadb (10.3). (BZ#2223572, BZ#2223574, BZ#2223962, BZ#2223965)

Security Fix(es):

* mariadb: segmentation fault via the component sub_select (CVE-2022-32084) * mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091) * mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791) * mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [MariaDB 10.3.32] socat: E Failed to set SNI host "" (SST failure) (BZ#2223961)

 https://cve.radiocsirt.org/vuln/bdu:2023-05678 bdu:2023-05678 2026-10-03T06:52:23.870381+00:00 bdu:2023-05678 https://cve.radiocsirt.org/vuln/bell-cve-2022-38791 Withdrawn: BELL-CVE-2022-38791 — CVE-2022-38791 does not affect BellSoft software 2026-10-03T06:52:23.870400+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-mariadb-2022-38791 BIT-mariadb-2022-38791 2026-10-03T06:52:23.870416+00:00

Affected: Bitnami: mariadb

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.

 https://cve.radiocsirt.org/vuln/euvd-2026-19113 EUVD-2026-19113 2026-10-03T06:52:23.870437+00:00 EUVD-2026-19113 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38791 fkie_cve-2022-38791 2026-10-03T06:52:23.870449+00:00

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.

 https://cve.radiocsirt.org/vuln/ghsa-v65w-qwp3-hm34 GHSA-v65w-qwp3-hm34 2026-10-03T06:52:23.870469+00:00

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.

 https://cve.radiocsirt.org/vuln/gsd-2022-38791 gsd-2022-38791 2026-10-03T06:52:23.870482+00:00 gsd-2022-38791 https://cve.radiocsirt.org/vuln/msrc_cve-2022-38791 msrc_CVE-2022-38791 — In MariaDB before 10.9.2 compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream w… 2026-10-03T06:52:23.870492+00:00 msrc_CVE-2022-38791 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12360-1 openSUSE-SU-2024:12360-1 — libmariadbd-devel-10.9.3-1.1 on GA media 2026-10-03T06:52:23.870510+00:00

libmariadbd-devel-10.9.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:5259 RHSA-2023:5259 — Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update 2026-10-03T06:52:23.870530+00:00

mariadb: segmentation fault via the component sub_select mariadb: server crash in JOIN_CACHE::free or in copy_fields mariadb: compress_write() fails to release mutex on failure mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6

 https://cve.radiocsirt.org/vuln/suse-ru-2023:3956-1 SUSE-RU-2023:3956-1 — Recommended update for mariadb104 2026-10-03T06:52:23.870554+00:00

Recommended update for mariadb104

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-38791 UBUNTU-CVE-2022-38791 2026-10-03T06:52:23.870693+00:00

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1258 WID-SEC-W-2022-1258 — MariaDB: Schwachstelle ermöglicht Denial of Service 2026-10-03T06:52:23.870727+00:00

Ein lokaler Angreifer kann eine Schwachstelle in MariaDB ausnutzen, um einen Denial of Service Angriff durchzuführen.