Amazon Linux 2023 : python3-pip, python3-pip-wheel (ALAS2023-2026-3175)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3175 advisory. urllib3 is an HTTP client library for Python. From 1.10.3 until 2.8.0, the HTTPResponse.readchunked and HTTPResponse.stream methods can allocate unbounded memory because the streaming chunk parser...

EulerOS 2.0 SP11 : rsyslog (EulerOS-SA-2026-4377)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

EulerOS 2.0 SP11 : perl-Storable (EulerOS-SA-2026-4272)

According to the versions of the perl-Storable packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads ...

EulerOS 2.0 SP11 : perl-XML-LibXML (EulerOS-SA-2026-4363)

According to the versions of the perl-XML-LibXML package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

EulerOS 2.0 SP13 : samba (EulerOS-SA-2026-4196)

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly...

TencentOS Server 3: grafana (TSSA-2026:1139)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1139 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

EulerOS 2.0 SP13 : perl (EulerOS-SA-2026-4081)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in...

EulerOS 2.0 SP13 : libssh (EulerOS-SA-2026-4155)

According to the versions of the libssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel write...

EulerOS 2.0 SP11 : rsyslog (EulerOS-SA-2026-4287)

According to the versions of the rsyslog packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during...

Amazon Linux 2023 : httpd, httpd-core, httpd-devel (ALAS2023-2026-3202)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3202 advisory. Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target must already b...

EulerOS 2.0 SP11 : open-isns (EulerOS-SA-2026-4351)

According to the versions of the open-isns packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through...

EulerOS 2.0 SP11 : open-isns (EulerOS-SA-2026-4261)

According to the versions of the open-isns packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through...

EulerOS 2.0 SP11 : jbig2dec (EulerOS-SA-2026-4238)

According to the versions of the jbig2dec packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafte...

Amazon Linux 2023 : perl-Storable, perl-Storable-tests (ALAS2023-2026-3203)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3203 advisory. Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed 32-bit item count from an SXHOOK record and calls...

EulerOS 2.0 SP13 : python-sphinx (EulerOS-SA-2026-4190)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...

EulerOS 2.0 SP13 : python-pyasn1 (EulerOS-SA-2026-4097)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Pyth...

Amazon Linux 2023 : php8.5, php8.5-bcmath, php8.5-cli (ALAS2023-2026-3164)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3164 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a...

Amazon Linux 2023 : jackson-core (ALAS2023-2026-3188)

"It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3188 advisory. NumberInput.looksLikeValidNumber in FasterXML jackson-core pre-validates stringified numbers with two regular expressions: PATTERNFLOAT +-?0-9.?0-9+eE+-?0-9+?, present since 2.17.0, and...

TencentOS Server 4: rpcbind (TSSA-2026:1070)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1070 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Amazon Linux 2 : perl-Storable (ALAS-2026-3989)

The version of perl-Storable installed on the remote host is prior to 2.45-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3989 advisory. Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record...