Important: tomcat-native

Issue Overview: Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be...

EulerOS 2.0 SP11 : nmap (EulerOS-SA-2026-4259)

According to the versions of the nmap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6getdataprimitive libnetutil/netutil.cc, so the...

EulerOS 2.0 SP11 : glib2 (EulerOS-SA-2026-4320)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails t...

EulerOS 2.0 SP11 : libssh2 (EulerOS-SA-2026-4250)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1, fixed in commit 5e47761, contains a double-free vulnerability in the sftpopen function in src/sftp.c that allows a...

EulerOS 2.0 SP13 : glib2 (EulerOS-SA-2026-4048)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change...

EulerOS 2.0 SP13 : expat (EulerOS-SA-2026-4135)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 has an integer overflow in getAttributeId.CVE-2026-56405 Expat through 2.8.3 contains an out-of-bounds read vulnerability tha...

EulerOS 2.0 SP13 : libssh2 (EulerOS-SA-2026-4156)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 grows its publickey list with SSH2REALLOC but does not zero-initialize new entries before parsing populates them, so a par...

EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2026-4339)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked...

EulerOS 2.0 SP13 : perl-XML-LibXML (EulerOS-SA-2026-4181)

According to the versions of the perl-XML-LibXML package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte...

EulerOS 2.0 SP11 : openssl (EulerOS-SA-2026-4264)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: When CMS password-based decryption RFC 3211 / PWRI key unwrap processes attacker-supplied CMS data, an attacker-chosen stream-mode...

Amazon Linux 2 : libsoup (ALAS-2026-3970)

The version of libsoup installed on the remote host is prior to 2.56.0-6. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3970 advisory. OOB Read via Integer Overflow on libsoup through libsoup/websocket/soup-websocket-connection.c via processframe leads to...

EulerOS 2.0 SP11 : perl-Socket (EulerOS-SA-2026-4361)

According to the versions of the perl-Socket packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, packipmreqsource checks the length of its source argumen...

Amazon Linux 2 : qt5-qtbase (ALAS-2026-3980)

The version of qt5-qtbase installed on the remote host is prior to 5.15.3-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3980 advisory. Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XM...

Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2026-3211)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3211 advisory. Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perlstudychunk. When...

EulerOS 2.0 SP11 : openssl (EulerOS-SA-2026-4354)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: When CMS password-based decryption RFC 3211 / PWRI key unwrap processes attacker-supplied CMS data, an attacker-chosen stream-mode...

TencentOS Server 3: coreutils (TSSA-2026:1143)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1143 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EulerOS 2.0 SP13 : perl-Archive-Tar (EulerOS-SA-2026-4173)

According to the versions of the perl-Archive-Tar packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory...

TencentOS Server 3: libevent (TSSA-2026:1140)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1140 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Rocky Linux 8 [CIQ] Security Update: tftp / tftp-debuginfo / tftp-debugsource / tftp-server / etc (crlsa-2026_78952)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202678952 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly fro...

EulerOS 2.0 SP13 : sssd (EulerOS-SA-2026-4201)

According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPa...