https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:37:21.288181+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:15699 ALSA-2025:15699 — Moderate: mysql-selinux and mysql8.4 security update 2026-10-03T10:37:21.797536+00:00

Affected: AlmaLinux:10: mysql-selinux, AlmaLinux:10: mysql8.4-common, AlmaLinux:10: mysql8.4-errmsg, AlmaLinux:10: mysql8.4-test-data

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon (mysqld) and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files.

Security Fix(es):

* openssl: Timing side-channel in ECDSA signature computation (CVE-2024-13176) * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30688) * mysql: Stored Procedure unspecified vulnerability (CPU Apr 2025) (CVE-2025-30699) * mysql: UDF unspecified vulnerability (CPU Apr 2025) (CVE-2025-30721) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30682) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30683) * mysql: Components Services unspecified vulnerability (CPU Apr 2025) (CVE-2025-30715) * mysql: Parser unspecified vulnerability (CPU Apr 2025) (CVE-2025-21574) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-21585) * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21588) * mysql: Replication unspecified vulnerability (CPU Apr 2025) (CVE-2025-30681) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-21577) * mysql: Optimizer unspecified vulnerability (CPU Apr 2025) (CVE-2025-30687) * mysql: DML unspecified vulnerability (CPU Apr 2025) (CVE-2025-21580) * mysql: PS uns…

 https://cve.radiocsirt.org/vuln/bdu:2025-03280 bdu:2025-03280 2026-10-03T10:37:21.797647+00:00 bdu:2025-03280 https://cve.radiocsirt.org/vuln/bell-cve-2024-13176 BELL-CVE-2024-13176 2026-10-03T10:37:21.797665+00:00

Affected: Alpaquita:23: openssl, Alpaquita:stream: openssl, BellSoft Hardened Containers:23: openssl, BellSoft Hardened Containers:stream: openssl

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0129 certfr-2025-avi-0129 — De multiples vulnérabilités ont été découvertes dans OpenSSL. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-03T10:37:21.797688+00:00 certfr-2025-avi-0129 https://cve.radiocsirt.org/vuln/euvd-2026-276471 EUVD-2026-276471 2026-10-03T10:37:21.797703+00:00 EUVD-2026-276471 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13176 fkie_cve-2024-13176 2026-10-03T10:37:21.797715+00:00

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation.

Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency.

There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low.

The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.

 https://cve.radiocsirt.org/vuln/ghsa-r9fv-h47r-823f GHSA-r9fv-h47r-823f 2026-10-03T10:37:21.797755+00:00

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation.

Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency.

There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low.

 https://cve.radiocsirt.org/vuln/msrc_cve-2024-13176 msrc_CVE-2024-13176 — Timing side-channel in ECDSA signature computation 2026-10-03T10:37:21.797776+00:00 msrc_CVE-2024-13176 https://cve.radiocsirt.org/vuln/oesa-2025-1190 OESA-2025-1190 — edk2 security update 2026-10-03T10:37:21.797793+00:00

Affected: openEuler:22.03-LTS-SP4: edk2

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fix(es):

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation.

Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency.

There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low.(CVE-2024-13176)

Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed in some situations

Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code. However, only applications that directly call the SSL_free_buffers function are affected by this issue. Applications that do not call this function are not v…

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14696-1 openSUSE-SU-2025:14696-1 — libopenssl-3-devel-3.2.3-4.1 on GA media 2026-10-03T10:37:21.797832+00:00

libopenssl-3-devel-3.2.3-4.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:0345-1 SUSE-SU-2025:0345-1 — Security update for openssl-1_1 2026-10-03T10:37:21.797849+00:00

Security update for openssl-1_1

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-13176 UBUNTU-CVE-2024-13176 2026-10-03T10:37:21.797864+00:00

Affected: Ubuntu:Pro:14.04:LTS: openssl, Ubuntu:Pro:16.04:LTS: openssl, Ubuntu:Pro:16.04:LTS: edk2, Ubuntu:Pro:FIPS:16.04:LTS: openssl, Ubuntu:Pro:18.04:LTS: openssl, Ubuntu:Pro:18.04:LTS: openssl1.0, Ubuntu:Pro:18.04:LTS: edk2, Ubuntu:Pro:FIPS-updates:18.04:LTS: openssl, Ubuntu:Pro:FIPS:18.04:LTS: openssl, Ubuntu:20.04:LTS: openssl and 15 more

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDSA signature computations could allow recovering the private key by an attacker. However, measuring the timing would require either local access to the signing application or a very fast network connection with low latency. There is a timing signal of around 300 nanoseconds when the top word of the inverted ECDSA nonce value is zero. This can happen with significant probability only for some of the supported elliptic curves. In particular the NIST P-521 curve is affected. To be able to measure this leak, the attacker process must either be located in the same physical computer or must have a very fast network connection with low latency. For that reason the severity of this vulnerability is Low. The FIPS modules in 3.4, 3.3, 3.2, 3.1 and 3.0 are affected by this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0131 WID-SEC-W-2025-0131 — OpenSSL: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T10:37:21.797915+00:00

Ein lokaler Angreifer kann eine Schwachstelle in OpenSSL ausnutzen, um Informationen offenzulegen.