https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:20:12.021942+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:0894 ALSA-2024:0894 — Moderate: mysql:8.0 security update 2026-10-03T04:20:12.335492+00:00

Affected: AlmaLinux:8: mecab, AlmaLinux:8: mecab-devel, AlmaLinux:8: mecab-ipadic, AlmaLinux:8: mecab-ipadic-EUCJP, AlmaLinux:8: mysql, AlmaLinux:8: mysql-common, AlmaLinux:8: mysql-devel, AlmaLinux:8: mysql-errmsg, AlmaLinux:8: mysql-libs, AlmaLinux:8: mysql-server and 1 more

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.

Security Fix(es):

* mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911) * mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933) * mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982) * mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962) * mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953, CVE-2023-21955) * mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966) * mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972) * mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980) * mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057) * mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008) * mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112) * mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (…

 https://cve.radiocsirt.org/vuln/bdu:2025-03964 bdu:2025-03964 2026-10-03T04:20:12.335596+00:00 bdu:2025-03964 https://cve.radiocsirt.org/vuln/bell-cve-2022-4899 Withdrawn: BELL-CVE-2022-4899 — CVE-2022-4899 does not affect BellSoft software 2026-10-03T04:20:12.335614+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0563 certfr-2023-avi-0563 — De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Certaines d'entre elles permettent à un attaquant de… 2026-10-03T04:20:12.335630+00:00 certfr-2023-avi-0563 https://cve.radiocsirt.org/vuln/euvd-2026-217966 EUVD-2026-217966 2026-10-03T04:20:12.335644+00:00 EUVD-2026-217966 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4899 fkie_cve-2022-4899 2026-10-03T04:20:12.335655+00:00

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.

 https://cve.radiocsirt.org/vuln/ghsa-5c9c-6x87-f9vm GHSA-5c9c-6x87-f9vm — zstd vulnerable to buffer overrun 2026-10-03T04:20:12.335676+00:00

Affected: SwiftURL: github.com/facebook/zstd, PyPI: zstd

A vulnerability was found in zstd v1.4.10, where an attacker can supply an empty string as an argument to the command line tool to cause buffer overrun.

 https://cve.radiocsirt.org/vuln/gsd-2022-4899 gsd-2022-4899 2026-10-03T04:20:12.335698+00:00 gsd-2022-4899 https://cve.radiocsirt.org/vuln/msrc_cve-2022-4899 msrc_CVE-2022-4899 — A vulnerability was found in zstd v1.4.10 where an attacker can supply empty string as an argument to the command line… 2026-10-03T04:20:12.335709+00:00 msrc_CVE-2022-4899 https://cve.radiocsirt.org/vuln/oesa-2023-1213 OESA-2023-1213 — zstd security update 2026-10-03T04:20:12.335726+00:00

Affected: openEuler:22.03-LTS-SP1: zstd

Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage,provided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels and has a better compression ratio. Security Fix(es): A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.(CVE-2022-4899)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13613-1 openSUSE-SU-2024:13613-1 — libzstd-devel-1.5.5-5.1 on GA media 2026-10-03T04:20:12.335746+00:00

libzstd-devel-1.5.5-5.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2023-121 Withdrawn: PYSEC-2023-121 — zstd vulnerable to buffer overrun 2026-10-03T04:20:12.335762+00:00

Withdrawn by the publisher.

Affected: PyPI: zstd

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.

 https://cve.radiocsirt.org/vuln/rhsa-2024:0894 RHSA-2024:0894 — Red Hat Security Advisory: mysql:8.0 security update 2026-10-03T04:20:12.335779+00:00

zstd: mysql: buffer overrun in util.c mysql: InnoDB unspecified vulnerability (CPU Apr 2023) mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) mysql: Server: DML unspecified vulnerability (CPU Apr 2023) mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) mysql: Client programs unspecified vulnerability (CPU Apr 2023) mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) mysql: InnoDB unspecified vulnerability (CPU Jul 2023) mysql: Server: Optimizer uns…

 https://cve.radiocsirt.org/vuln/suse-su-2023:2074-1 SUSE-SU-2023:2074-1 — Security update for zstd 2026-10-03T04:20:12.335912+00:00

Security update for zstd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-4899 UBUNTU-CVE-2022-4899 2026-10-03T04:20:12.335938+00:00

Affected: Ubuntu:22.04:LTS: libzstd

A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1794 WID-SEC-W-2023-1794 — Oracle MySQL: Mehrere Schwachstellen 2026-10-03T04:20:12.335956+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.