EulerOS Virtualization for ARM 64 3.0.6.0 : glibc (EulerOS-SA-2021-2000)

According to the version of the glibc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The iconv function in the GNU C Library aka glibc or libc6 2.32 and earlier, when processing invalid input sequences in th...

EulerOS Virtualization for ARM 64 3.0.6.0 : grub2 (EulerOS-SA-2021-2001)

According to the versions of the grub2 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2 in versions prior to 2.06. Setparamprefix in the menu rendering code performs a length...

EulerOS Virtualization for ARM 64 3.0.6.0 : curl (EulerOS-SA-2021-1997)

According to the version of the curl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - This flaw can be mitigated in curl as shipped with Red Hat Enterprise Linux and Red Hat Software Collections when using cur...

EulerOS Virtualization for ARM 64 3.0.6.0 : glib2 (EulerOS-SA-2021-1999)

According to the versions of the glib2 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to...

EulerOS Virtualization 2.9.0 : python-pillow (EulerOS-SA-2021-1972)

According to the version of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid...

EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2021-1970)

According to the version of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2...

EulerOS Virtualization 2.9.0 : sqlite (EulerOS-SA-2021-1973)

According to the version of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in SQLite's SELECT query functionality src/select.c. This flaw allows an attacker who is capable of running SQL...

EulerOS Virtualization 2.9.1 : sqlite (EulerOS-SA-2021-1965)

According to the version of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in SQLite's SELECT query functionality src/select.c. This flaw allows an attacker who is capable of running SQL...

EulerOS Virtualization 2.9.1 : grub2 (EulerOS-SA-2021-1714)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged...

EulerOS Virtualization 2.9.1 : sudo (EulerOS-SA-2021-1726)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A race condition vulnerability was found in the temporary file handling of sudoedit's SELinux RBAC support. On systems where SELinux...

EulerOS Virtualization 2.9.1 : binutils (EulerOS-SA-2021-1732)

According to the version of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Load value injection in some IntelR Processors utilizing speculative execution may allow an authenticated user to potentially enabl...

EulerOS Virtualization 2.9.1 : python-rtslib (EulerOS-SA-2021-1730)

According to the version of the python-rtslib packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in Open-iSCSI rtslib-fb through versions 2.1.72, where it has weak permissions for /etc/target/saveconfig.js...

EulerOS Virtualization 2.9.1 : tpm2-tss (EulerOS-SA-2021-1727)

According to the version of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privileg...

EulerOS Virtualization 2.9.0 : qemu (EulerOS-SA-2021-1763)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ideatapicmdreplyend in hw/ide/atapi.c in QEMU 5.1.0 allows out-of-bounds read access because a buffer index is not validated...

EulerOS Virtualization 2.9.1 : python-pip (EulerOS-SA-2021-1728)

According to the version of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - DISPUTED An issue was discovered in pip all versions because it installs the version with the highest version number, even if th...

EulerOS Virtualization 2.9.0 : python3 (EulerOS-SA-2021-1747)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and...

EulerOS Virtualization 2.9.1 : open-iscsi (EulerOS-SA-2021-1718)

According to the version of the open-iscsi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails...

EulerOS Virtualization 2.9.1 : systemd (EulerOS-SA-2021-1724)

According to the version of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in systemd, where it mishandles numerical usernames beginning with decimal digits, or '0x' followed by hexadecimal...

EulerOS Virtualization 2.9.0 : tpm2-tss (EulerOS-SA-2021-1752)

According to the version of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privileg...

EulerOS Virtualization 2.9.0 : sudo (EulerOS-SA-2021-1757)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A race condition vulnerability was found in the temporary file handling of sudoedit's SELinux RBAC support. On systems where SELinux...