EulerOS Virtualization 2.15.1 : pyOpenSSL (EulerOS-SA-2026-4661)

According to the versions of the pyOpenSSL package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user...

EulerOS Virtualization 2.15.0 : ncurses (EulerOS-SA-2026-4712)

According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : ncurses v6.5 and v6.4 are vulnerable to Buffer Overflow in progs/infocmp.c, function analyzestring.CVE-2025-69720 Tenable has...

EulerOS Virtualization 2.15.1 : attr (EulerOS-SA-2026-4746)

According to the versions of the attr package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attacker...

EulerOS Virtualization 2.15.1 : python-cryptography (EulerOS-SA-2026-4662)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5...

EulerOS Virtualization 2.15.0 : python-requests (EulerOS-SA-2026-4726)

According to the versions of the python-requests package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a...

EulerOS Virtualization 2.15.0 : unbound (EulerOS-SA-2026-4736)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain condition...

EulerOS Virtualization 2.15.0 : perl-Archive-Tar (EulerOS-SA-2026-4837)

According to the versions of the perl-Archive-Tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction...

EulerOS Virtualization 2.15.1 : alsa-lib (EulerOS-SA-2026-4745)

According to the versions of the alsa-lib package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c...

Fedora 43 : sofia-sip (2026-046c8a7938)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-046c8a7938 advisory. Upstream release 1.13.19. ---- Patch for out-of-bounds read in msgmultipartparse. Tenable has extracted the preceding description block directly fro...

EulerOS Virtualization 2.15.1 : bzip2 (EulerOS-SA-2026-4748)

According to the versions of the bzip2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : bzip2 contains an offbyone error in the bzip2recover utility. When processing a specially crafted file, the application performs an...

EulerOS Virtualization 2.15.0 : tar (EulerOS-SA-2026-4621)

According to the versions of the tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the...

Linux Distros Unpatched Vulnerability : CVE-2026-103682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Invocation of the Jolokia special agent with the login password in the command line in Checkmk versions 2.5.0 before 2.5.0p16 allows a local user on the Checkmk...

Linux Distros Unpatched Vulnerability : CVE-2026-100081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen-netback: defer xenvifmcastaddrlistfree In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has...

EulerOS Virtualization 2.15.1 : edk2 (EulerOS-SA-2026-4584)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack...

EulerOS Virtualization 2.15.1 : gawk (EulerOS-SA-2026-4755)

According to the versions of the gawk package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Integer overflow vulnerability has been found in 'builtin.c' program file of gawk dosub routine. This issue could be used to overwrite...

EulerOS Virtualization 2.15.1 : sqlite (EulerOS-SA-2026-4796)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53...

Linux Distros Unpatched Vulnerability : CVE-2026-112913

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock and AsyncReadWriteLock on Windows use connect to attach SQLite t...

Rocky Linux 8 [CIQ] Security Update: delve / delve-debuginfo / delve-debugsource / go-toolset / golang / etc (crlsa-2026_95638)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202695638 advisory. crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates CVE-2026-111943 Tenable has extracted the preceding description...

EulerOS Virtualization 2.15.1 : python-virtualenv (EulerOS-SA-2026-4575)

According to the versions of the python-virtualenv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU...

EulerOS Virtualization 2.15.1 : polkit (EulerOS-SA-2026-4660)

According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the...

EulerOS Virtualization 2.15.1 : perl (EulerOS-SA-2026-4777)

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit...

EulerOS Virtualization 2.15.1 : python-pillow (EulerOS-SA-2026-4786)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when...

EulerOS Virtualization 2.15.0 : libssh2 (EulerOS-SA-2026-4707)

According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the fi...

EulerOS Virtualization 2.15.1 : python-pip (EulerOS-SA-2026-4665)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. Th...

EulerOS Virtualization 2.15.1 : python-wheel (EulerOS-SA-2026-4576)

According to the versions of the python-wheel package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, th...

EulerOS Virtualization 2.15.0 : edk2 (EulerOS-SA-2026-4741)

According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short...

EulerOS Virtualization 2.15.1 : tar (EulerOS-SA-2026-4579)

According to the versions of the tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. First, the...

EulerOS Virtualization 2.15.0 : python-pip (EulerOS-SA-2026-4846)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to t...

EulerOS Virtualization 2.15.0 : kernel (EulerOS-SA-2026-4599)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : net: netpoll: fix incorrect refcount handling causing incorrect cleanupCVE-2025-68245 ftrace: Fix softlockup in...

AlmaLinux 9.2 [TuxCare] Security Update: expat / expat-devel / expat-static Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1794052458)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1794052458 advisory. - libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2 in lib/xmlparse.c that...

EulerOS Virtualization 2.15.0 : python-pillow (EulerOS-SA-2026-4613)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when loading a...

EulerOS Virtualization 2.15.1 : systemd (EulerOS-SA-2026-4677)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel...

EulerOS Virtualization 2.15.1 : python3 (EulerOS-SA-2026-4670)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The import hook in CPython that handles legacy .pyc files SourcelessFileLoader is incorrectly handled in FileLoader a base class a...

EulerOS Virtualization 2.15.1 : libgcrypt (EulerOS-SA-2026-4646)

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to...

EulerOS Virtualization 2.15.0 : expat (EulerOS-SA-2026-4813)

According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLGetBuffer, XMLParse, XMLParseBuffer, XMLParserFree, or...

EulerOS Virtualization 2.15.0 : autogen (EulerOS-SA-2026-4586)

According to the versions of the autogen package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function strstrsse2. The...

EulerOS Virtualization 2.15.1 : gnutls (EulerOS-SA-2026-4555)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memory...

EulerOS Virtualization 2.15.0 : avahi (EulerOS-SA-2026-4685)

According to the versions of the avahi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4...

RockyLinux 8 : tesseract (RLSA-2026:95725)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:95725 advisory. tesseract: Tesseract: Heap out-of-bounds write/read leading to information disclosure via crafted data CVE-2026-88048 tesseract: Tesseract: Stack buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-122053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Symfony Serializer component ObjectNormalizer treats any attribute name containing . and, from Symfony 6.4, as a writable property path, allowing untrusted...

EulerOS Virtualization 2.15.0 : ca-certificates (EulerOS-SA-2026-4688)

According to the versions of the ca-certificates package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying...

EulerOS Virtualization 2.15.0 : libxml2 (EulerOS-SA-2026-4826)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershe...

EulerOS Virtualization 2.15.0 : acl (EulerOS-SA-2026-4803)

According to the versions of the acl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile,...

EulerOS Virtualization 2.15.1 : radvd (EulerOS-SA-2026-4792)

According to the versions of the radvd package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buff...

EulerOS Virtualization 2.15.1 : python-pillow (EulerOS-SA-2026-4664)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount,...

EulerOS Virtualization 2.15.1 : sqlite (EulerOS-SA-2026-4674)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attacke...

EulerOS Virtualization 2.15.1 : gnutls (EulerOS-SA-2026-4637)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels,...

EulerOS Virtualization 2.15.0 : libvirt (EulerOS-SA-2026-4742)

According to the versions of the libvirt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it...

EulerOS Virtualization 2.15.0 : libpcap (EulerOS-SA-2026-4601)

According to the versions of the libpcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8...

EulerOS Virtualization 2.15.0 : wget (EulerOS-SA-2026-4860)

According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function...