EulerOS Virtualization 3.0.6.6 : python (EulerOS-SA-2022-1139)

According to the versions of the python packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, wh...

EulerOS Virtualization 3.0.6.6 : python-jinja2 (EulerOS-SA-2022-1140)

According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the punctuationre...

EulerOS Virtualization 3.0.6.6 : util-linux (EulerOS-SA-2022-1152)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - DISPUTED An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to...

EulerOS Virtualization 3.0.6.0 : libdnf (EulerOS-SA-2022-1073)

According to the versions of the libdnf packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to...

EulerOS Virtualization 3.0.6.0 : libwebp (EulerOS-SA-2022-1081)

According to the versions of the libwebp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ShiftBytes. The highest threat...

EulerOS Virtualization 3.0.6.0 : kernel (EulerOS-SA-2022-1046)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - preallocelemsandfreelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF...

EulerOS Virtualization 3.0.6.0 : cpio (EulerOS-SA-2022-1060)

According to the versions of the cpio package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c dsfgetstr intege...

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2022-1062)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - curl 7.1.1 to and including 7.75.0 is vulnerable to an 'Exposure of Private Personal Information to an Unauthorized Actor' by leaki...

EulerOS Virtualization 3.0.6.0 : libX11 (EulerOS-SA-2022-1072)

According to the versions of the libX11 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11...

EulerOS Virtualization 3.0.6.6 : openssl098e (EulerOS-SA-2022-1136)

According to the versions of the openssl098e package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string...

EulerOS Virtualization 3.0.6.6 : squashfs-tools (EulerOS-SA-2022-1147)

According to the versions of the squashfs-tools package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by...

EulerOS Virtualization 3.0.6.0 : systemd (EulerOS-SA-2022-1098)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a...

EulerOS Virtualization 3.0.6.0 : glibc (EulerOS-SA-2022-1066)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The mqnotify function in the GNU C Library aka glibc versions 2.32 and 2.33 has a use-after-free. It may use the notification thre...

EulerOS Virtualization 3.0.6.0 : python-pip (EulerOS-SA-2022-1091)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly u...

EulerOS Virtualization 3.0.6.6 : cups (EulerOS-SA-2022-1115)

According to the versions of the cups packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update...

EulerOS Virtualization 3.0.6.0 : libjpeg-turbo (EulerOS-SA-2022-1075)

According to the versions of the libjpeg-turbo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Libjpeg-turbo all version have a stack-based buffer overflow in the 'transform' component. A remote attacker can send a...

EulerOS Virtualization 3.0.6.6 : glibc (EulerOS-SA-2022-1122)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - sysdeps/i386/ldbl2mpn.c in the GNU C Library aka glibc or libc6 before 2.23 on x86 targets has a stack- based buffer overflow if t...

EulerOS Virtualization 3.0.6.6 : binutils (EulerOS-SA-2022-1110)

According to the versions of the binutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large...

EulerOS Virtualization 3.0.6.6 : flac (EulerOS-SA-2022-1118)

According to the versions of the flac packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In FLACbitreaderreadricesignedblock of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. This coul...

EulerOS Virtualization 3.0.6.0 : squashfs-tools (EulerOS-SA-2022-1096)

According to the versions of the squashfs-tools package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - squashfsopendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by...