EulerOS Virtualization 2.9.1 : openssl (EulerOS-SA-2023-3089)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the...

EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2023-3103)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the...

EulerOS 2.0 SP10 : openssl (EulerOS-SA-2023-3225)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DHcheck,...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2023-2694)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in Libtiff's LZWDecode function in the libtiff/tiflzw.c file. This flaw allows a local attacker to cra...

EulerOS 2.0 SP8 : qt (EulerOS-SA-2023-3154)

According to the versions of the qt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont munitsPerEm initialization is mishandle...

EulerOS 2.0 SP9 : python-pip (EulerOS-SA-2023-3315)

According to the versions of the python-pip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the Cookie HTTP header special or provide any helpers for...

EulerOS Virtualization 2.9.0 : perl-HTTP-Tiny (EulerOS-SA-2023-2994)

According to the versions of the perl-HTTP-Tiny package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS...

EulerOS Virtualization 3.0.6.0 : linux-firmware (EulerOS-SA-2023-3437)

According to the versions of the linux-firmware packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue in Zen 2 CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2023-2813)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. CVE-2023-26965 - A null pointer...

EulerOS Virtualization 2.11.0 : perl (EulerOS-SA-2023-3077)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuratio...

EulerOS Virtualization 2.11.1 : sudo (EulerOS-SA-2023-2744)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sudo before 1.9.13 does not escape control characters in log messages. CVE-2023-28486 - Sudo before 1.9.13 does not escape control...

EulerOS 2.0 SP10 : shim (EulerOS-SA-2024-1098)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary:...

EulerOS 2.0 SP11 : cloud-init (EulerOS-SA-2023-2838)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could...

EulerOS 2.0 SP10 : libX11 (EulerOS-SA-2024-1089)

According to the versions of the libX11 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms function. This flaw allows a local user to trigger an...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2023-3307)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in function TIFFReadDirectory libtiff before 4.4.0 allows attackers to cause a denial of service via crafted TIFF file...

EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2023-3501)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a...

EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2023-2673)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroy...

EulerOS Virtualization 2.11.0 : openssh (EulerOS-SA-2023-3074)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code...

EulerOS 2.0 SP11 : dbus (EulerOS-SA-2023-2857)

According to the versions of the dbus packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the...

EulerOS Virtualization 2.9.0 : dbus (EulerOS-SA-2023-2980)

According to the versions of the dbus packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemo...