EulerOS 2.0 SP10 : ghostscript (EulerOS-SA-2024-2886)

According to the versions of the ghostscript packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Artifex Ghostscript before 10.03.0 has a heap-based pointer disclosure observable in a constructed BaseFont name in the function...

EulerOS 2.0 SP9 : docker-runc (EulerOS-SA-2024-2810)

According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and...

EulerOS 2.0 SP10 : python-cryptography (EulerOS-SA-2024-2893)

According to the versions of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the python-cryptography package.This issue may allow a remote attacker to decrypt captured messages in TLS servers...

EulerOS 2.0 SP10 : vim (EulerOS-SA-2024-2898)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor.double-free in dialogchanged in Vim v9.1.0648.When abandoning a buffer, Vim may ask the user what to d...

EulerOS 2.0 SP10 : golang (EulerOS-SA-2024-2906)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.This is a follow-up to...

EulerOS 2.0 SP10 : xmlrpc-c (EulerOS-SA-2024-2899)

According to the versions of the xmlrpc-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.3.xmlparse.c does not reject a negative length for XMLParseBuffer.CVE-2024-45490 An issue was...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2024-2889)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A null pointer dereference flaw was found in Libtiff via tifdirinfo.c.This issue may allow an attacker to trigger memory allocation failures throu...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2024-2908)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A null pointer dereference flaw was found in Libtiff via tifdirinfo.c.This issue may allow an attacker to trigger memory allocation failures throu...

EulerOS 2.0 SP10 : expat (EulerOS-SA-2024-2884)

According to the versions of the expat package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libexpat before 2.6.3.nextScaffoldPart in xmlparse.c can have an integer overflow for mgroupSize on 32-bit platforms wher...

EulerOS 2.0 SP10 : kernel (EulerOS-SA-2024-2888)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : scsi: qedi: Fix crash while reading debugfs attributeCVE-2024-40978 drm/ nouveau/dispnv04: fix null pointer dereference in...

EulerOS 2.0 SP10 : ruby (EulerOS-SA-2024-2895)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : REXML is an XML toolkit for Ruby.The REXML gem 3.3.2 has a DoS vulnerability when it parses an XML that has many entity expansions with SAX2 or pull...

EulerOS 2.0 SP10 : openjpeg2 (EulerOS-SA-2024-2891)

According to the versions of the openjpeg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in OpenJPEG similar to CVE-2019-6988.This flaw allows an attacker to bypass existing protections and cause an...

EulerOS 2.0 SP9 : python-cryptography (EulerOS-SA-2024-2819)

According to the versions of the python-cryptography package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS server...

EulerOS 2.0 SP9 : unbound (EulerOS-SA-2024-2822)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference flaw was found in the ubctxsetfwd function in Unbound. This issue could allow an attacker who can invoke specific...

EulerOS 2.0 SP10 : golang (EulerOS-SA-2024-2887)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion.This is a follow-up to...

EulerOS 2.0 SP10 : syslinux (EulerOS-SA-2024-2915)

According to the versions of the syslinux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27...

EulerOS 2.0 SP10 : unbound (EulerOS-SA-2024-2897)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow flaw was found in the cfgmarkports function within Unbound's configfile.c, which can lead to memory corruption.This issue...

EulerOS 2.0 SP10 : python-setuptools (EulerOS-SA-2024-2894)

According to the versions of the python-setuptools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download...

EulerOS 2.0 SP10 : curl (EulerOS-SA-2024-2901)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is...

EulerOS 2.0 SP10 : curl (EulerOS-SA-2024-2882)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is...