EulerOS 2.0 SP11 : expat (EulerOS-SA-2026-4316)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external...

EulerOS 2.0 SP11 : wget (EulerOS-SA-2026-4386)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP...

EulerOS 2.0 SP11 : bind (EulerOS-SA-2026-4213)

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker...

EulerOS 2.0 SP11 : unbound (EulerOS-SA-2026-4293)

According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare loca...

EulerOS 2.0 SP11 : libsoup (EulerOS-SA-2026-4248)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked...

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2026-4278)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap r...

EulerOS 2.0 SP11 : dhcp (EulerOS-SA-2026-4221)

According to the versions of the dhcp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone...

EulerOS 2.0 SP11 : expat (EulerOS-SA-2026-4225)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external...

EulerOS 2.0 SP11 : apr-util (EulerOS-SA-2026-4211)

According to the versions of the apr-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility:...

EulerOS 2.0 SP11 : openssh (EulerOS-SA-2026-4353)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line...

EulerOS 2.0 SP11 : perl-HTTP-Tiny (EulerOS-SA-2026-3141)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. The unvalidated input...

EulerOS 2.0 SP11 : busybox (EulerOS-SA-2026-3059)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client udhcpc6 DNSSERVERS option handler in...

EulerOS 2.0 SP11 : python-sqlalchemy (EulerOS-SA-2026-3097)

According to the versions of the python-sqlalchemy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a...

EulerOS 2.0 SP11 : python-lxml (EulerOS-SA-2026-3146)

According to the versions of the python-lxml packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default...

EulerOS 2.0 SP11 : python-pygments (EulerOS-SA-2026-3150)

According to the versions of the python-pygments packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...

EulerOS 2.0 SP11 : perl-HTTP-Tiny (EulerOS-SA-2026-3087)

According to the versions of the perl-HTTP-Tiny packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values. The unvalidated input...

EulerOS 2.0 SP11 : python-sqlalchemy (EulerOS-SA-2026-3151)

According to the versions of the python-sqlalchemy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Underscore.js is a utility-belt library for JavaScript. Prior to 1.13.8, the .flatten and .isEqual functions use recursion without a...

EulerOS 2.0 SP11 : sqlite (EulerOS-SA-2026-2228)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain...

EulerOS 2.0 SP11 : openssh (EulerOS-SA-2026-2257)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenSSH before 10.3 mishandles the authorizedkeys principals option in uncommon scenarios involving a principals list in conjunction with a...

EulerOS 2.0 SP11 : docker-engine (EulerOS-SA-2026-2239)

According to the versions of the docker-engine package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to...