EulerOS 2.0 SP5 : zsh (EulerOS-SA-2020-1329)

According to the version of the zsh package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid...

EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2020-1307)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Java SE component of Oracle Java SE subcomponent: JCE. The supported version that is affected is Java SE: 8u212...

EulerOS 2.0 SP5 : flatpak (EulerOS-SA-2020-1305)

According to the version of the flatpak packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address...

EulerOS 2.0 SP5 : vim (EulerOS-SA-2020-1138)

According to the version of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group which may be different from the group ownershi...

EulerOS 2.0 SP5 : libesmtp (EulerOS-SA-2020-1113)

According to the version of the libesmtp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlmbuildtype2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based...

EulerOS 2.0 SP5 : openssl098e (EulerOS-SA-2020-1121)

According to the version of the openssl098e package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The dtls1getmessagefragment function in d1both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attacker...

EulerOS 2.0 SP5 : cups (EulerOS-SA-2020-1096)

According to the versions of the cups packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - cups: stack-buffer-overflow in libcups's asn1gettype function.CVE-2019-8675 - cups: stack-buffer-overflow in libcups's asn1gettype...

EulerOS 2.0 SP5 : python-reportlab (EulerOS-SA-2020-1129)

According to the version of the python-reportlab package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Python PDF generation library.Security Fixes:ReportLab through 3.5.26 allows remote code execution because of toColorevalarg in colors.py,...

EulerOS 2.0 SP5 : python (EulerOS-SA-2020-1126)

According to the versions of the python packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service resource consumption via a ZIP bomb.CVE-2019-9674 -...

EulerOS 2.0 SP5 : ncurses (EulerOS-SA-2020-1118)

According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is an illegal address access in the ncsafestrcat function in strings.c in ncurses 6.0 that will lead to a remote denial of service...

EulerOS 2.0 SP5 : gnupg2 (EulerOS-SA-2020-1104)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - kbx/keybox-search.c in GnuPG before 1.4.19, 2.0.x before 2.0.27, and 2.1.x before 2.1.2 does not properly handle bitwise left-shifts, which allow...

EulerOS 2.0 SP5 : haproxy (EulerOS-SA-2020-1105)

According to the version of the haproxy package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding header missing the 'chunked' value were not being...

EulerOS 2.0 SP5 : libjpeg-turbo (EulerOS-SA-2020-1115)

According to the version of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libjpeg-turbo before 1.3.1 allows remote attackers to cause a denial of service crash via a crafted JPEG file, related to the Exif...

SUSE SLES12 Security Update : libssh (SUSE-SU-2020:0131-1)

This update for libssh fixes the following issues : CVE-2019-14889: Fixed an unwanted command execution in scp caused by unsanitized location bsc1158095. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...

EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2019-2710)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a...

EulerOS 2.0 SP5 : PackageKit (EulerOS-SA-2019-2700)

According to the version of the PackageKit packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed...

EulerOS 2.0 SP5 : mod_wsgi (EulerOS-SA-2019-2711)

According to the version of the modwsgi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - modwsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which migh...

EulerOS 2.0 SP5 : openssl (EulerOS-SA-2019-2699)

According to the version of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - There is an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected...

EulerOS 2.0 SP5 : krb5 (EulerOS-SA-2019-2532)

According to the version of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 aka krb5 before 1.17. If an attacker can obtain a krbtgt ticket using an olde...

EulerOS 2.0 SP5 : golang (EulerOS-SA-2019-2529)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.CVE-2019-16276 - Go before 1.12.11 and 1.3.x before 1.13.2 can panic upo...