EulerOS Virtualization for ARM 64 3.0.3.0 : lua (EulerOS-SA-2019-2339)

According to the version of the lua packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Lua 5.3.5 has a use-after-free in luaupvaluejoin in lapi.c. For example, a crash outcome might be achieved by an attacker wh...

EulerOS Virtualization for ARM 64 3.0.3.0 : libtiff (EulerOS-SA-2019-2323)

According to the version of the libtiff package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - TIFFWriteScanline in tifwrite.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by...

EulerOS Virtualization for ARM 64 3.0.3.0 : qemu-kvm (EulerOS-SA-2019-2352)

According to the versions of the qemu-kvm packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In QEMU 3.0.0, tcpemu in slirp/tcpsubr.c has a heap-based buffer overflow.CVE-2019-6778 - A flaw was found in QEMU's...

EulerOS Virtualization for ARM 64 3.0.3.0 : gd (EulerOS-SA-2019-2335)

According to the version of the gd package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - When using the gdImageCreateFromXbm function in the GD Graphics Library aka LibGD 2.2.5, as used in the PHP GD extension in PH...

EulerOS Virtualization for ARM 64 3.0.3.0 : libpng (EulerOS-SA-2019-2331)

According to the versions of the libpng package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - In libpng 1.6.34, a wrong calculation of rowfactor in the pngcheckchunklength function pngrutil.c may trigger an intege...

EulerOS Virtualization for ARM 64 3.0.3.0 : bind (EulerOS-SA-2019-2321)

According to the versions of the bind packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Change 4777 introduced in October 2017 introduced an unforeseen issue in releases which were issued after that date,...

EulerOS Virtualization for ARM 64 3.0.3.0 : nmap (EulerOS-SA-2019-2350)

According to the version of the nmap package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - nselibssh2.cc in Nmap 7.70 is subject to a denial of service condition due to a double free when an SSH connection fails, as...

EulerOS Virtualization for ARM 64 3.0.3.0 : libvorbis (EulerOS-SA-2019-2345)

According to the versions of the libvorbis package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - barknoisehybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.CVE-2018-10393 -...

EulerOS Virtualization for ARM 64 3.0.3.0 : glib2 (EulerOS-SA-2019-2325)

According to the version of the glib2 packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a co...

EulerOS Virtualization for ARM 64 3.0.3.0 : unbound (EulerOS-SA-2019-2341)

According to the version of the unbound package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in the way unbound validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC...

EulerOS Virtualization for ARM 64 3.0.3.0 : memcached (EulerOS-SA-2019-2330)

According to the version of the memcached package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In memcached before 1.5.14, a NULL pointer dereference was found in the 'lru mode' and 'lru tempttl' commands. This...

EulerOS Virtualization for ARM 64 3.0.3.0 : lcms2 (EulerOS-SA-2019-2342)

According to the version of the lcms2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Little CMS aka Little Color Management System 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c,...

EulerOS Virtualization for ARM 64 3.0.3.0 : blktrace (EulerOS-SA-2019-2328)

According to the version of the blktrace package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - blktrace aka Block IO Tracing 1.2.0, as used with the Linux kernel and Android, has a buffer overflow in the devmapread...

EulerOS Virtualization for ARM 64 3.0.3.0 : icu (EulerOS-SA-2019-2312)

According to the version of the icu package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - The ucnvUTF8FromUTF8 function in ucnvu8.cpp in International Components for Unicode ICU for C/C++ through 60.1 mishandles...

EulerOS Virtualization for ARM 64 3.0.3.0 : libsndfile (EulerOS-SA-2019-2351)

According to the versions of the libsndfile package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Heap-based Buffer Overflow in the psfbinheaderwritef function in common.c in libsndfile through 1.0.28 allows remot...

Fedora 30 : xen (2019-cbb732f760)

add missing XSA-299 patches x86: Machine Check Error on Page Size Change DoS XSA-304, CVE-2018-12207 TSX Asynchronous Abort speculative side channel XSA-305, CVE-2019-11135 ---- VCPUOPinitialise DoS XSA-296, CVE-2019-18420 missing descriptor table limit checking in x86 PV emulation XSA-298,...

EulerOS Virtualization for ARM 64 3.0.3.0 : libjpeg-turbo (EulerOS-SA-2019-2318)

According to the version of the libjpeg-turbo package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing ...

EulerOS Virtualization for ARM 64 3.0.3.0 : flac (EulerOS-SA-2019-2327)

According to the version of the flac package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - An error in the 'readmetadatavorbiscomment' function src/libFLAC/streamdecoder.c in FLAC version 1.3.2 can be exploited to...

EulerOS Virtualization for ARM 64 3.0.3.0 : pango (EulerOS-SA-2019-2344)

According to the version of the pango package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Gnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer overflow can be used to ge...

EulerOS Virtualization for ARM 64 3.0.3.0 : libXfont2 (EulerOS-SA-2019-2347)

According to the version of the libXfont2 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - In libXfont before 1.5.4 and libXfont2 before 2.0.3, a local attacker can open but not read files on the system as root...