EulerOS 2.0 SP13 : libssh (EulerOS-SA-2026-4155)

According to the versions of the libssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSHMSGCHANNELOPEN, causing later channel write...

EulerOS 2.0 SP11 : python-pyasn1 (EulerOS-SA-2026-4369)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Pyth...

EulerOS 2.0 SP11 : httpd (EulerOS-SA-2026-4236)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue affects Apache HTTP Server:...

EulerOS 2.0 SP11 : cpio (EulerOS-SA-2026-4310)

According to the versions of the cpio packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio...

EulerOS 2.0 SP11 : golang (EulerOS-SA-2026-4323)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 If a trusted template...

EulerOS 2.0 SP11 : python-sphinx (EulerOS-SA-2026-4372)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...

Amazon Linux 2 : perl-HTTP-Date (ALAS-2026-3996)

The version of perl-HTTP-Date installed on the remote host is prior to 6.02-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3996 advisory. parsedate -- and str2time, which delegates to it -- used regexes withambiguous adjacent greedy runs year/clock/timezone digit...

EulerOS 2.0 SP13 : busybox (EulerOS-SA-2026-4033)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a...

EulerOS 2.0 SP13 : gawk (EulerOS-SA-2026-4045)

According to the versions of the gawk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Buffer overflow vulnerability has been found in 'extension/readdir.c' program file of gawk ftype routine. This issue could be used to crash the...

EulerOS 2.0 SP13 : glib2 (EulerOS-SA-2026-4139)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change...

EulerOS 2.0 SP13 : open-isns (EulerOS-SA-2026-4167)

According to the versions of the open-isns packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through...

EulerOS 2.0 SP13 : jbig2dec (EulerOS-SA-2026-4054)

According to the versions of the jbig2dec packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafte...

Amazon Linux 2 : containerd (ALASNITRO-ENCLAVES-2026-120)

The version of containerd installed on the remote host is prior to 2.3.5-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-120 advisory. containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with...

Amazon Linux 2023 : php8.5, php8.5-bcmath, php8.5-cli (ALAS2023-2026-3164)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3164 advisory. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a...

EulerOS 2.0 SP13 : python-sphinx (EulerOS-SA-2026-4190)

According to the versions of the python-sphinx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a depth...

TencentOS Server 4: rpcbind (TSSA-2026:1070)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1070 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EulerOS 2.0 SP13 : open-isns (EulerOS-SA-2026-4076)

According to the versions of the open-isns packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through...

Amazon Linux 2023 : perl-Storable, perl-Storable-tests (ALAS2023-2026-3203)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3203 advisory. Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed 32-bit item count from an SXHOOK record and calls...

EulerOS 2.0 SP13 : libusbx (EulerOS-SA-2026-4158)

According to the versions of the libusbx packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allows attackers to crash applications by supplying a malform...

EulerOS 2.0 SP13 : python-pyasn1 (EulerOS-SA-2026-4188)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Pyth...