EulerOS Virtualization 3.0.6.6 : iscsi-initiator-utils (EulerOS-SA-2021-1485)

According to the versions of the iscsi-initiator-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TC...

EulerOS Virtualization 3.0.6.6 : gdk-pixbuf2 (EulerOS-SA-2021-1475)

According to the versions of the gdk-pixbuf2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service segmentation faul...

EulerOS Virtualization 3.0.2.6 : libX11 (EulerOS-SA-2021-1441)

According to the versions of the libX11 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An integer overflow vulnerability leading to a double-free was found in libX11. This flaw allows a local privileged attacker to...

EulerOS Virtualization for ARM 64 3.0.2.0 : hunspell (EulerOS-SA-2021-1400)

According to the version of the hunspell package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.CVE-2019-16707 Note th...

EulerOS Virtualization 2.9.1 : brotli (EulerOS-SA-2021-1591)

According to the version of the brotli package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a 'one-shot'...

EulerOS Virtualization 3.0.2.6 : glibc (EulerOS-SA-2021-1412)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - On the x86-64 architecture, the GNU C Library aka glibc before 2.31 fails to ignore the LDPREFERMAP32BITEXEC environment variable...

EulerOS Virtualization 3.0.2.6 : chrony (EulerOS-SA-2021-1429)

According to the version of the chrony package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A flaw was found in chrony versions before 3.5.1 when creating the PID file under the /var/run/chrony folder. The file is created...

EulerOS Virtualization 3.0.6.6 : gnupg2 (EulerOS-SA-2021-1479)

According to the version of the gnupg2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which resul...

EulerOS Virtualization 3.0.6.6 : compat-libtiff3 (EulerOS-SA-2021-1464)

According to the version of the compat-libtiff3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tiflzw.c resulting in DoS or code execution via a...

EulerOS Virtualization 3.0.2.6 : sudo (EulerOS-SA-2021-1424)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - selinuxeditcopytfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileg...

EulerOS Virtualization 2.9.1 : binutils (EulerOS-SA-2021-1590)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A Null Pointer Dereference vulnerability exists in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU...

EulerOS Virtualization 3.0.6.6 : gnome-keyring (EulerOS-SA-2021-1478)

According to the version of the gnome-keyring packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from t...

EulerOS Virtualization 2.9.1 : cpio (EulerOS-SA-2021-1593)

According to the version of the cpio package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The cpiosafernamesuffix function in util.c in cpio 2.11 allows remote attackers to cause a denial of service out-of-bounds write via a...

EulerOS Virtualization 2.9.1 : dbus (EulerOS-SA-2021-1597)

According to the version of the dbus packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in dbus = 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-daemon, leaks file descriptors when...

EulerOS Virtualization 3.0.2.6 : cifs-utils (EulerOS-SA-2021-1409)

According to the version of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used to inject...

EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2021-1380)

According to the version of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC...

EulerOS Virtualization 2.9.1 : sudo (EulerOS-SA-2021-1627)

According to the version of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Sudo superuser do allows a system administrator to give certain users or groups of users the ability to run some or all commands as roo...

EulerOS Virtualization 2.9.1 : python3 (EulerOS-SA-2021-1623)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In Python 3 through 3.9.0, the Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via...

EulerOS Virtualization 3.0.6.6 : cvs (EulerOS-SA-2021-1467)

According to the version of the cvs package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository...

EulerOS Virtualization 3.0.2.6 : spice (EulerOS-SA-2021-1451)

According to the version of the spice packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before...