EulerOS Virtualization for ARM 64 3.0.6.0 : glibc (EulerOS-SA-2021-2000)

According to the version of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The iconv function in the GNU C Library aka glibc or libc6 2.32 and earlier, when processing invalid input sequences in th...

EulerOS Virtualization for ARM 64 3.0.6.0 : curl (EulerOS-SA-2021-1997)

According to the version of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - This flaw can be mitigated in curl as shipped with Red Hat Enterprise Linux and Red Hat Software Collections when using cur...

EulerOS Virtualization 2.9.0 : python-pillow (EulerOS-SA-2021-1972)

According to the version of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid...

EulerOS Virtualization 2.9.0 : sqlite (EulerOS-SA-2021-1973)

According to the version of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in SQLite's SELECT query functionality src/select.c. This flaw allows an attacker who is capable of running SQL...

EulerOS Virtualization 2.9.1 : sqlite (EulerOS-SA-2021-1965)

According to the version of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in SQLite's SELECT query functionality src/select.c. This flaw allows an attacker who is capable of running SQL...

EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2021-1970)

According to the version of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2...

EulerOS Virtualization 2.9.0 : sudo (EulerOS-SA-2021-1757)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A race condition vulnerability was found in the temporary file handling of sudoedit's SELinux RBAC support. On systems where SELinux...

EulerOS Virtualization 2.9.1 : python-pip (EulerOS-SA-2021-1728)

According to the version of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - DISPUTED An issue was discovered in pip all versions because it installs the version with the highest version number, even if th...

EulerOS Virtualization 2.9.1 : binutils (EulerOS-SA-2021-1732)

According to the version of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Load value injection in some IntelR Processors utilizing speculative execution may allow an authenticated user to potentially enabl...

EulerOS Virtualization 2.9.0 : c-ares (EulerOS-SA-2021-1756)

According to the version of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service i...

EulerOS Virtualization 2.9.0 : tpm2-tss (EulerOS-SA-2021-1752)

According to the version of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privileg...

EulerOS Virtualization 2.9.1 : qemu (EulerOS-SA-2021-1735)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ideatapicmdreplyend in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated...

EulerOS Virtualization 2.9.1 : tpm2-tss (EulerOS-SA-2021-1727)

According to the version of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privileg...

EulerOS Virtualization 2.9.1 : grub2 (EulerOS-SA-2021-1714)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged...

EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2021-1763)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ideatapicmdreplyend in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated...

EulerOS Virtualization 2.9.1 : python-rtslib (EulerOS-SA-2021-1730)

According to the version of the python-rtslib packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in Open-iSCSI rtslib-fb through versions 2.1.72, where it has weak permissions for /etc/target/saveconfig.js...

EulerOS Virtualization 2.9.0 : grub2 (EulerOS-SA-2021-1741)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged...

EulerOS Virtualization 2.9.1 : bind (EulerOS-SA-2021-1725)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in bind when an asterisk character is present in an empty non-terminal location within the DNS graph. This flaw...

EulerOS Virtualization 2.9.1 : c-ares (EulerOS-SA-2021-1710)

According to the version of the c-ares package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service i...

EulerOS Virtualization 2.9.1 : python-pillow (EulerOS-SA-2021-1729)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.CVE-2020-5313 - An out-of-bounds write flaw was...