{"id":"CVE-2022-4899","aliases":["ALSA-2024:0894","ALSA-2024:1141","AZL-25813","BELL-CVE-2022-4899","CLSA-2025-1739820848","DEBIAN-CVE-2022-4899","EUVD-2023-0287","GHSA-5c9c-6x87-f9vm","MGASA-2023-0128","OESA-2023-1213","OESA-2023-1214","PYSEC-2023-121","RHSA-2024:0894","RHSA-2024:1141","RHSA-2024:2619","RLSA-2024:0894","ROOT-OS-DEBIAN-11-CVE-2022-4899","SUSE-SU-2023:1688-1","SUSE-SU-2023:2074-1","UBUNTU-CVE-2022-4899","openSUSE-SU-2024:13613-1"],"status":"published","title":"zstd vulnerable to buffer overrun","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01588,"percentile":0.75805,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2023-03-29T16:19:23Z","modified":"2026-11-05T12:28:21Z","fixes":[{"ecosystem":"SwiftURL","package":"github.com/facebook/zstd","fixed_in":["1.5.4"],"sources":["ghsa","osv"]},{"ecosystem":"PyPI","package":"zstd","fixed_in":["1.5.4.0"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:2","package":"zstd","fixed_in":["1.5.4-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libzstd","fixed_in":["1.5.4+dfsg2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libzstd","fixed_in":["1.5.4+dfsg2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libzstd","fixed_in":["1.5.4+dfsg2-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"zstd","fixed_in":["1.4.8-1.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"zstd","fixed_in":["1.5.0-4.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"zstd","fixed_in":["1.5.0-4.oe2203"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"libzstd","fixed_in":["1.4.8+dfsg-2.1.root.io.1","1.4.8+dfsg-2.1.root.io.5","1.4.8+dfsg-2.1.root.io.2","1.4.8+dfsg-2.1.root.io.3","1.4.8+dfsg-2.1.root.io.4","1.4.8+dfsg-2.1.aikido.6"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-libzstd","fixed_in":["1.4.8+dfsg-2.1.root.io.1","1.4.8+dfsg-2.1.root.io.5","1.4.8+dfsg-2.1.root.io.2","1.4.8+dfsg-2.1.root.io.3","1.4.8+dfsg-2.1.root.io.4","1.4.8+dfsg-2.1.aikido.6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"zstd","fixed_in":["1.5.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"zstd","fixed_in":["1.5.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"zstd","fixed_in":["1.5.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"zstd","fixed_in":["1.5.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"zstd","fixed_in":["1.5.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"zstd","fixed_in":["1.4.4-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"zstd","fixed_in":["1.4.4-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"zstd","fixed_in":["1.4.4-150000.1.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"zstd","fixed_in":["1.5.5-5.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"SwiftURL","package":"github.com/facebook/zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4.0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mecab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.996-2.module_el8.6.0+3340+d764b636"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mecab-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.996-2.module_el8.6.0+3340+d764b636"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mecab-ipadic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0.20070801-16.module_el8.6.0+3340+d764b636"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mecab-ipadic-EUCJP","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0.20070801-16.module_el8.6.0+3340+d764b636"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.module_el8.9.0+3735+82bd6c11"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.module_el8.9.0+3735+82bd6c11"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.module_el8.9.0+3735+82bd6c11"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.module_el8.9.0+3735+82bd6c11"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.module_el8.9.0+3735+82bd6c11"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.module_el8.9.0+3735+82bd6c11"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:8","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.module_el8.9.0+3735+82bd6c11"}]}],"bundled":87},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.el9_3"}]}],"bundled":76},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.el9_3"}]}],"bundled":76},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.el9_3"}]}],"bundled":76},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.el9_3"}]}],"bundled":76},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.el9_3"}]}],"bundled":76},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.el9_3"}]}],"bundled":76},{"source":"osv","ecosystem":"AlmaLinux:9","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.36-1.el9_3"}]}],"bundled":76},{"source":"osv","ecosystem":"Azure Linux:2","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4-1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.40-1.el9_2.tuxcare.els1"}]}],"bundled":129},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.40-1.el9_2.tuxcare.els1"}]}],"bundled":129},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.40-1.el9_2.tuxcare.els1"}]}],"bundled":129},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.40-1.el9_2.tuxcare.els1"}]}],"bundled":129},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.40-1.el9_2.tuxcare.els1"}]}],"bundled":129},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.40-1.el9_2.tuxcare.els1"}]}],"bundled":129},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.40-1.el9_2.tuxcare.els1"}]}],"bundled":129},{"source":"osv","ecosystem":"Debian:12","package":"libzstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libzstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libzstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+dfsg2-1"}]}]},{"source":"osv","ecosystem":"SwiftURL","package":"github.com/facebook/zstd","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.5.4"}]}]},{"source":"osv","ecosystem":"PyPI","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4.0"}]}],"versions":["1.1.4","1.2.0","1.3.0.2","1.3.1","1.3.3","1.3.4","1.3.4.3","1.3.4.4","1.3.4.5","1.3.5.0","1.3.5.1","1.3.8.0","1.3.8.1","1.4.0.0","1.4.1.0","1.4.3.2","1.4.4.0","1.4.5.0","1.4.5.1","1.4.8.0","1.4.8.1","1.4.9.0","1.4.9.1","1.5.0.0","1.5.0.1","1.5.0.2","1.5.0.3","1.5.0.4","1.5.1.0","1.5.2.0","1.5.2.1","1.5.2.2","1.5.2.3","1.5.2.4","1.5.2.5","1.5.2.6"]},{"source":"osv","ecosystem":"Mageia:8","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.8-1.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-4.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-4.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab-ipadic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mecab-ipadic-EUCJP","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0.20070801-16.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"mysql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.9.0+21207+6c20cb3d"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"mysql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-server-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"mysql-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el9_3"}]}],"bundled":87},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-config-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-errmsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-icu-data-files","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-server-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-syspaths","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-mysql80-mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.el7"}]}],"bundled":86},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mecab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.10.0+1676+9b4b6e24"}]}],"bundled":87},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mecab","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.996-2.module+el8.10.0+1937+28fbbc83"}]}],"bundled":87},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mecab-ipadic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0.20070801-16.module+el8.10.0+1676+9b4b6e24"}]}],"bundled":87},{"source":"osv","ecosystem":"Rocky Linux:8","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.0.36-1.module+el8.10.0+1676+9b4b6e24"}]}],"bundled":87},{"source":"osv","ecosystem":"Root:Debian:11","package":"libzstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.8+dfsg-2.1.root.io.1"},{"fixed":"1.4.8+dfsg-2.1.root.io.5"},{"fixed":"1.4.8+dfsg-2.1.root.io.2"},{"fixed":"1.4.8+dfsg-2.1.root.io.3"},{"fixed":"1.4.8+dfsg-2.1.root.io.4"},{"fixed":"1.4.8+dfsg-2.1.aikido.6"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-libzstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.8+dfsg-2.1.root.io.1"},{"fixed":"1.4.8+dfsg-2.1.root.io.5"},{"fixed":"1.4.8+dfsg-2.1.root.io.2"},{"fixed":"1.4.8+dfsg-2.1.root.io.3"},{"fixed":"1.4.8+dfsg-2.1.root.io.4"},{"fixed":"1.4.8+dfsg-2.1.aikido.6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.4-150000.1.9.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libzstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.8+dfsg-2.1","1.4.8+dfsg-2.1build1","1.4.8+dfsg-3","1.4.8+dfsg-3build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"zstd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-5.1"}]}]}],"products":[{"vendor":"facebook","product":"zstandard"},{"vendor":"microsoft","product":"zstd"}],"references":[{"url":"https://github.com/facebook/zstd/issues/3200","tags":["x_transferred","Issue Tracking","Patch","report","web","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20230725-0005/","tags":["x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4899","tags":["web","advisory"]},{"url":"https://github.com/facebook/zstd/pull/3220","tags":["web"]},{"url":"https://github.com/sergey-dryabzhinsky/python-zstd/commit/c8a619aebdbd6b838fbfef6e19325a70f631a4c6","tags":["web"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/zstd/PYSEC-2023-121.yaml","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20230725-0005","tags":["web"]},{"url":"https://github.com/advisories/GHSA-5c9c-6x87-f9vm","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:0894","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4899","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21911","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21919","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21920","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21929","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21933","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21935","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21940","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21945","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21946","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21947","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21953","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21955","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21962","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21966","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21972","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21976","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21977","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21980","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-21982","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22005","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22007","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22008","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22032","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22033","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22038","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22046","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22048","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22053","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22054","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22056","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22057","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22058","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22059","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22064","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22065","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22066","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22068","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22070","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22078","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22079","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22084","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22092","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22097","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22103","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22104","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22110","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22111","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22112","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22113","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22114","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-22115","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20960","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20961","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20962","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20963","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20964","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20965","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20966","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20967","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20968","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20969","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20970","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20971","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20972","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20973","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20974","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20976","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20977","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20978","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20981","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20982","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20983","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20984","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20985","tags":["report"]},{"url":"https://bugzilla.redhat.com/2179864","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188109","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188113","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188115","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188116","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188117","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188118","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188119","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188120","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188121","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188122","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188123","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188124","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188125","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188127","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188128","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188129","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188130","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188131","tags":["report"]},{"url":"https://bugzilla.redhat.com/2188132","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224211","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224212","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224213","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224214","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224215","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224216","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224217","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224218","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224219","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224220","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224221","tags":["report"]},{"url":"https://bugzilla.redhat.com/2224222","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245014","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245015","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245016","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245017","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245018","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245019","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245020","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245021","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245022","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245023","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245024","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245026","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245027","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245028","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245029","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245030","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245031","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245032","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245033","tags":["report"]},{"url":"https://bugzilla.redhat.com/2245034","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258771","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258772","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258773","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258774","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258775","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258776","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258777","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258778","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258779","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258780","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258781","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258782","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258783","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258784","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258785","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258787","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258788","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258789","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258790","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258791","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258792","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258793","tags":["report"]},{"url":"https://bugzilla.redhat.com/2258794","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-0894.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-20993.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21049.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21050.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21051.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21052.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21053.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21055.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21056.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21057.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21061.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21137.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-21200.html","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1141","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1141.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-4899","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1739820848.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4899.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-4899","tags":["advisory"]},{"url":"https://github.com/facebook/zstd","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2023-0128.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31740","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2023-March/014246.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4HPJ26L3GAUDVNKJFCJNA2GLTI6EUJXO/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1213","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1214","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188113","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188117","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188129","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224220","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224222","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245032","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245033","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258780","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258792","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258794","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0894.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4899","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21911","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21911","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21919","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21919","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21920","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21929","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21929","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21933","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21935","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21935","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21940","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21940","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21945","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21946","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21947","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21953","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21955","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21962","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21966","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21966","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21972","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21972","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21976","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21977","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21980","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-21982","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-21982","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22005","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22005","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22007","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22007","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22008","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22008","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22032","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22032","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22033","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22033","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22038","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22038","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22046","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22048","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22048","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22053","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22054","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22054","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22056","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22056","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22057","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22057","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22058","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22058","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22059","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22059","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22064","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22064","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22065","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22066","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22066","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22068","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22068","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22070","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22070","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22078","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22078","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22079","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22079","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22084","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22084","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22092","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22092","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22097","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22097","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22103","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22103","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22104","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22110","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22110","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22111","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22111","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22112","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22112","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22113","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22113","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22114","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-22115","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22115","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20960","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20960","tags":["advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujan2024.html#AppendixMSQL","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20961","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20961","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20962","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20962","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20963","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20963","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20964","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20964","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20965","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20965","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20966","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20966","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20967","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20967","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20968","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20968","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20969","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20969","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20970","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20970","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20971","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20971","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20972","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20972","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20973","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20973","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20974","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20974","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20976","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20976","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20977","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20977","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20978","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20978","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20981","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20982","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20982","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20983","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20984","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20985","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20985","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-20993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-20993","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20993","tags":["advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixMSQL","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275437","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21049","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21049","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21050","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21050","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21051","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21051","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275440","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21052","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275441","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21053","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21053","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275444","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21055","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21055","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275445","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21056","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21056","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21057","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21057","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21057","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21061","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21061","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2298321","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21137","tags":["advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2024.html#AppendixMSQL","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2318875","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21200","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21200","tags":["advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2024.html#AppendixMSQL","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1141.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2619","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2275435","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2619.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21015","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21015","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21015","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:0894","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231688-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1209533","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-4899","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232074-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-4899","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-4899","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.","status":"published","published":"2023-03-31T00:00:00Z","modified":"2025-02-18T17:23:22.964Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-400","CWE-400"],"updated_at":"2026-11-02T14:34:37.599536Z"}],"euvd":[{"id":"EUVD-2023-0287","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.","status":"published","published":"2023-03-31T00:00:00Z","modified":"2025-02-18T17:23:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:28.952595Z"}],"ghsa":[{"id":"GHSA-5c9c-6x87-f9vm","title":"zstd vulnerable to buffer overrun","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply an empty string as an argument to the command line tool to cause buffer overrun.","status":"published","published":"2023-03-31T21:30:37Z","modified":"2024-11-19T19:09:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:38:21.777721Z"}],"nvd":[{"id":"CVE-2022-4899","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.","status":"published","published":"2023-03-31T20:15:07.213Z","modified":"2026-06-17T05:22:14.653Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:07:37.020555Z"}],"osv":[{"id":"AZL-25813","title":"CVE-2022-4899 affecting package zstd for versions less than 1.5.4-1","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.","status":"published","published":"2023-03-31T20:15:07Z","modified":"2026-04-21T04:23:17.985903Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2022-4899","title":"CVE-2022-4899 does not affect BellSoft software","status":"withdrawn","published":"2023-03-31T20:15:00Z","modified":"2026-09-04T07:15:14.38161302Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-4899","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.","status":"published","published":"2023-03-31T00:00:00Z","modified":"2026-10-31T02:45:08.763072413Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:44:28.090335Z"},{"id":"GHSA-5c9c-6x87-f9vm","title":"zstd vulnerable to buffer overrun","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply an empty string as an argument to the command line tool to cause buffer overrun.","status":"published","published":"2023-03-31T21:30:37Z","modified":"2026-06-23T11:26:27.833259766Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:38.213481Z"},{"id":"OESA-2023-1213","title":"zstd security update","description":"Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage,provided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels and has a better compression ratio.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.(CVE-2022-4899)","status":"published","published":"2023-04-14T11:05:41Z","modified":"2026-08-18T01:17:39.04825069Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1214","title":"zstd security update","description":"Zstd is a fast lossless compression algorithm. It's backed by a very fast entropy stage,provided by Huff0 and FSE library. It's a real-time compression scenario for zlib levels and has a better compression ratio.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.(CVE-2022-4899)","status":"published","published":"2023-04-14T11:05:41Z","modified":"2026-08-18T01:17:39.054609947Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2024:0894","title":"Red Hat Security Advisory: mysql:8.0 security update","status":"published","published":"2024-10-22T04:03:21Z","modified":"2026-06-28T11:05:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1141","title":"Red Hat Security Advisory: mysql security update","status":"published","published":"2024-09-16T17:20:33Z","modified":"2026-06-28T11:07:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:2619","title":"Red Hat Security Advisory: rh-mysql80-mysql security update","status":"published","published":"2024-09-13T23:57:28Z","modified":"2026-06-28T11:08:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RLSA-2024:0894","title":"Moderate: mysql:8.0 security update","description":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.\n\nSecurity Fix(es):\n\n* mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911)\n\n* mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933)\n\n* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982)\n\n* mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962)\n\n* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953, CVE-2023-21955)\n\n* mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966)\n\n* mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972)\n\n* mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980)\n\n* mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008)\n\n* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112)\n\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22033)\n\n* mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) (CVE-2023-22046, CVE-2023-22054, CVE-2023-22056)\n\n* mysql: Client programs unspecified vulnerability (CPU Jul 2023) (CVE-2023-22053)\n\n* mysql: Server: DDL unspecified vulnerability (CPU Jul 2023) (CVE-2023-22058)\n\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22066, CVE-2023-22068, CVE-2023-22084, CVE-2023-22097, CVE-2023-22104, CVE-2023-22114)\n\n* mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) (CVE-2023-22111)\n\n* mysql: Server: DML unspecified vulnerability (CPU Oct 2023) (CVE-2023-22115)\n\n* mysql: Server: RAPID unspecified vulnerability (CPU Jan 2024) (CVE-2024-20960)\n\n* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2024) (CVE-2024-20963)\n\n* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2024) (CVE-2024-20964)\n\n* mysql: Server: Replication unspecified vulnerability (CPU Jan 2024) (CVE-2024-20967)\n\n* mysql: Server: Options unspecified vulnerability (CPU Jan 2024) (CVE-2024-20968)\n\n* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20969)\n\n* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) (CVE-2024-20961, CVE-2024-20962, CVE-2024-20965, CVE-2024-20966, CVE-2024-20970, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20982)\n\n* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20981)\n\n* mysql: Server: DML unspecified vulnerability (CPU Jan 2024) (CVE-2024-20983)\n\n* mysql: Server : Security : Firewall unspecified vulnerability (CPU Jan 2024) (CVE-2024-20984)\n\n* mysql: Server: UDF unspecified vulnerability (CPU Jan 2024) (CVE-2024-20985)\n\n* zstd: mysql: buffer overrun in util.c (CVE-2022-4899)\n\n* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2023) (CVE-2023-22038)\n\n* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2023) (CVE-2023-22048)\n\n* mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2023) (CVE-2023-22113)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Fix for MySQL bug #33630199 in 8.0.32 introduces regression when --set-gtid-purged=OFF (Rocky Linux-22452)","status":"published","published":"2025-05-07T19:11:47.341314Z","modified":"2025-05-07T19:38:05.499784Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2022-4899","title":"CVE-2022-4899 in libzstd - Patched by Root","description":"Root has patched CVE-2022-4899 in the libzstd package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-23T08:14:14Z","modified":"2026-08-23T10:18:55.461155525Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.544053Z"},{"id":"UBUNTU-CVE-2022-4899","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.","status":"published","published":"2023-03-31T20:15:00Z","modified":"2026-04-22T13:36:43.299894Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:58.967204Z"},{"id":"ALSA-2024:0894","title":"Moderate: mysql:8.0 security update","description":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.\n\nSecurity Fix(es):\n\n* mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911)\n* mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933)\n* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982)\n* mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962)\n* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953, CVE-2023-21955)\n* mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966)\n* mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972)\n* mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980)\n* mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057)\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008)\n* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112)\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22033)\n* mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) (CVE-2023-22046, CVE-2023-22054, CVE-2023-22056)\n* mysql: Client programs unspecified vulnerability (CPU Jul 2023) (CVE-2023-22053)\n* mysql: Server: DDL unspecified vulnerability (CPU Jul 2023) (CVE-2023-22058)\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22066, CVE-2023-22068, CVE-2023-22084, CVE-2023-22097, CVE-2023-22104, CVE-2023-22114)\n* mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) (CVE-2023-22111)\n* mysql: Server: DML unspecified vulnerability (CPU Oct 2023) (CVE-2023-22115)\n* mysql: Server: RAPID unspecified vulnerability (CPU Jan 2024) (CVE-2024-20960)\n* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2024) (CVE-2024-20963)\n* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2024) (CVE-2024-20964)\n* mysql: Server: Replication unspecified vulnerability (CPU Jan 2024) (CVE-2024-20967)\n* mysql: Server: Options unspecified vulnerability (CPU Jan 2024) (CVE-2024-20968)\n* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20969)\n* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) (CVE-2024-20961, CVE-2024-20962, CVE-2024-20965, CVE-2024-20966, CVE-2024-20970, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20982)\n* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20981)\n* mysql: Server: DML unspecified vulnerability (CPU Jan 2024) (CVE-2024-20983)\n* mysql: Server : Security : Firewall unspecified vulnerability (CPU Jan 2024) (CVE-2024-20984)\n* mysql: Server: UDF unspecified vulnerability (CPU Jan 2024) (CVE-2024-20985)\n* zstd: mysql: buffer overrun in util.c (CVE-2022-4899)\n* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2023) (CVE-2023-22038)\n* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2023) (CVE-2023-22048)\n* mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2023) (CVE-2023-22113)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Fix for MySQL bug #33630199 in 8.0.32 introduces regression when --set-gtid-purged=OFF (AlmaLinux-22452)","status":"published","published":"2024-02-20T00:00:00Z","modified":"2026-11-05T12:28:21.810564693Z","updated_at":"2026-11-05T13:30:00.949926Z"},{"id":"ALSA-2024:1141","title":"Moderate: mysql security update","description":"MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld) and many client programs and libraries.\n\nSecurity Fix(es):\n\n* mysql: InnoDB unspecified vulnerability (CPU Apr 2023) (CVE-2023-21911)\n* mysql: Server: DDL unspecified vulnerability (CPU Apr 2023) (CVE-2023-21919, CVE-2023-21929, CVE-2023-21933)\n* mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2023) (CVE-2023-21920, CVE-2023-21935, CVE-2023-21945, CVE-2023-21946, CVE-2023-21976, CVE-2023-21977, CVE-2023-21982)\n* mysql: Server: Components Services unspecified vulnerability (CPU Apr 2023) (CVE-2023-21940, CVE-2023-21947, CVE-2023-21962)\n* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21953)\n* mysql: Server: Partition unspecified vulnerability (CPU Apr 2023) (CVE-2023-21955)\n* mysql: Server: JSON unspecified vulnerability (CPU Apr 2023) (CVE-2023-21966)\n* mysql: Server: DML unspecified vulnerability (CPU Apr 2023) (CVE-2023-21972)\n* mysql: Client programs unspecified vulnerability (CPU Apr 2023) (CVE-2023-21980)\n* mysql: Server: Replication unspecified vulnerability (CPU Jul 2023) (CVE-2023-22005, CVE-2023-22007, CVE-2023-22057)\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22008)\n* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2023) (CVE-2023-22032, CVE-2023-22059, CVE-2023-22064, CVE-2023-22065, CVE-2023-22070, CVE-2023-22078, CVE-2023-22079, CVE-2023-22092, CVE-2023-22103, CVE-2023-22110, CVE-2023-22112)\n* mysql: InnoDB unspecified vulnerability (CPU Jul 2023) (CVE-2023-22033)\n* mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023) (CVE-2023-22046)\n* mysql: Client programs unspecified vulnerability (CPU Jul 2023) (CVE-2023-22053, CVE-2023-22054, CVE-2023-22056)\n* mysql: Server: DDL unspecified vulnerability (CPU Jul 2023) (CVE-2023-22058)\n* mysql: InnoDB unspecified vulnerability (CPU Oct 2023) (CVE-2023-22066, CVE-2023-22068, CVE-2023-22084, CVE-2023-22097, CVE-2023-22104, CVE-2023-22114)\n* mysql: Server: UDF unspecified vulnerability (CPU Oct 2023) (CVE-2023-22111)\n* mysql: Server: DML unspecified vulnerability (CPU Oct 2023) (CVE-2023-22115)\n* mysql: Server: RAPID unspecified vulnerability (CPU Jan 2024) (CVE-2024-20960)\n* mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2024) (CVE-2024-20961, CVE-2024-20962, CVE-2024-20965, CVE-2024-20966, CVE-2024-2097, CVE-2024-20971, CVE-2024-20972, CVE-2024-20973, CVE-2024-20974, CVE-2024-20976, CVE-2024-20977, CVE-2024-20978, CVE-2024-20982)\n* mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2024) (CVE-2024-20963)\n* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2024) (CVE-2024-20964)\n* mysql: Server: Replication unspecified vulnerability (CPU Jan 2024) (CVE-2024-20967)\n* mysql: Server: Options unspecified vulnerability (CPU Jan 2024) (CVE-2024-20968)\n* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20969)\n* mysql: Server: DDL unspecified vulnerability (CPU Jan 2024) (CVE-2024-20981)\n* mysql: Server: DML unspecified vulnerability (CPU Jan 2024) (CVE-2024-20983)\n* mysql: Server : Security : Firewall unspecified vulnerability (CPU Jan 2024) (CVE-2024-20984)\n* mysql: Server: UDF unspecified vulnerability (CPU Jan 2024) (CVE-2024-20985)\n* zstd: mysql: buffer overrun in util.c (CVE-2022-4899)\n* mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2023) (CVE-2023-22038)\n* mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2023) (CVE-2023-22048)\n* mysql: Server: Security: Encryption unspecified vulnerability (CPU Oct 2023) (CVE-2023-22113)\n\nBug Fix(es):\n\n* Fix for MySQL bug #33630199 in 8.0.32 introduces regression when --set-gtid-purged=OFF (AlmaLinux-22454)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-03-05T00:00:00Z","modified":"2026-10-29T11:42:21.235960429Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1739820848","title":"mysql: Fix of 129 CVEs","description":"- Update to MySQL 8.0.40\n- CVEs fixed:\n  CVE-2024-21201 CVE-2024-21236 CVE-2024-21230 CVE-2024-21160 CVE-2024-21196\n  CVE-2024-21239 CVE-2024-21173 CVE-2024-21193 CVE-2024-21159 CVE-2024-21135\n  CVE-2024-20996 CVE-2024-21166 CVE-2024-21157 CVE-2024-21231 CVE-2024-21199\n  CVE-2024-21207 CVE-2024-21194 CVE-2024-21238 CVE-2024-21218 CVE-2024-21203\n  CVE-2024-21162 CVE-2024-21213 CVE-2024-21219 CVE-2024-21163 CVE-2024-21241\n  CVE-2024-21125 CVE-2024-21134 CVE-2024-21130 CVE-2024-21198 CVE-2024-21142\n  CVE-2024-21127 CVE-2024-21237 CVE-2024-21197 CVE-2024-21212 CVE-2024-21247\n  CVE-2024-21129 CVE-2024-21200 CVE-2024-21171 CVE-2024-21165 CVE-2024-21137\n  CVE-2024-21061 CVE-2024-21057 CVE-2024-21056 CVE-2024-21055 CVE-2024-21053\n  CVE-2024-21052 CVE-2024-21051 CVE-2024-21050 CVE-2024-21049 CVE-2024-20993\n  CVE-2024-20984 CVE-2024-20982 CVE-2024-20970 CVE-2024-20968 CVE-2024-20966\n  CVE-2024-20964 CVE-2024-20962 CVE-2024-20960 CVE-2024-21179 CVE-2024-21185\n  CVE-2024-21177 CVE-2024-20972 CVE-2024-20976 CVE-2024-20974 CVE-2024-20978\n  CVE-2024-20981 CVE-2024-20969 CVE-2024-20985 CVE-2024-20965 CVE-2024-20967\n  CVE-2024-20977 CVE-2024-20961 CVE-2024-20983 CVE-2024-20963 CVE-2024-20971\n  CVE-2024-20973 CVE-2023-22103 CVE-2023-22070 CVE-2023-22114 CVE-2023-22079\n  CVE-2023-22066 CVE-2023-22104 CVE-2023-22084 CVE-2023-22078 CVE-2023-22111\n  CVE-2023-22064 CVE-2023-22113 CVE-2023-22097 CVE-2023-22065 CVE-2023-22092\n  CVE-2023-22110 CVE-2023-22059 CVE-2023-22068 CVE-2023-22115 CVE-2023-22032\n  CVE-2023-22112 CVE-2023-22033 CVE-2023-22048 CVE-2023-21950 CVE-2023-22058\n  CVE-2023-22008 CVE-2023-22007 CVE-2023-22046 CVE-2023-22054 CVE-2023-22005\n  CVE-2023-22056 CVE-2023-22038 CVE-2023-22053 CVE-2023-22057 CVE-2023-21935\n  CVE-2023-21972 CVE-2023-21953 CVE-2023-21977 CVE-2023-21962 CVE-2023-21955\n  CVE-2023-21946 CVE-2023-21920 CVE-2023-21919 CVE-2023-21980 CVE-2023-21929\n  CVE-2023-21982 CVE-2023-21966 CVE-2023-21945 CVE-2023-21911 CVE-2023-21933\n  CVE-2023-21976 CVE-2023-21940 CVE-2023-21947 CVE-2022-4899","status":"published","published":"2025-02-17T19:34:14Z","modified":"2026-10-21T10:45:06.040954276Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"DEBIAN-CVE-2022-4899","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.","status":"published","published":"2023-03-31T20:15:07.213Z","modified":"2026-11-03T06:03:14.969545339Z","updated_at":"2026-11-03T06:42:07.302733Z"},{"id":"MGASA-2023-0128","title":"Updated zstd packages fix security vulnerability","description":"Buffer overrun in util.c (CVE-2022-4899)\n","status":"published","published":"2023-04-06T21:20:12Z","modified":"2026-04-16T04:42:38.078336501Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13613-1","title":"libzstd-devel-1.5.5-5.1 on GA media","description":"These are all security issues fixed in the libzstd-devel-1.5.5-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:32:14.23611Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"PYSEC-2023-121","title":"zstd vulnerable to buffer overrun","description":"A vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.","status":"withdrawn","published":"2023-03-31T20:15:00Z","modified":"2026-06-23T11:15:07.738724821Z","updated_at":"2026-11-02T15:52:53.837392Z"},{"id":"SUSE-SU-2023:1688-1","title":"Security update for zstd","description":"This update for zstd fixes the following issues:\n\n- CVE-2022-4899: Fixed buffer overrun in util.c (bsc#1209533).\n","status":"published","published":"2023-03-29T16:19:23Z","modified":"2026-02-04T02:37:49.780805Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:2074-1","title":"Security update for zstd","description":"This update for zstd fixes the following issues:\n\n- CVE-2022-4899: Fixed buffer overrun in util.c (bsc#1209533).\n","status":"published","published":"2023-04-28T15:02:34Z","modified":"2026-02-04T02:26:40.187428Z","updated_at":"2026-11-02T15:53:52.350754Z"}]}}