EulerOS Virtualization 2.15.1 : vim (EulerOS-SA-2026-4680)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob...

EulerOS Virtualization 2.15.1 : openssl (EulerOS-SA-2026-4567)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1TYPE union member is...

EulerOS Virtualization 2.15.0 : bind (EulerOS-SA-2026-4806)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which...

EulerOS Virtualization 2.15.0 : grub2 (EulerOS-SA-2026-4598)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because the file-closin...

EulerOS Virtualization 2.15.1 : dracut (EulerOS-SA-2026-4753)

According to the versions of the dracut packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted...

EulerOS Virtualization 2.15.1 : libssh2 (EulerOS-SA-2026-4649)

According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the fi...

EulerOS Virtualization 2.15.1 : python-pip (EulerOS-SA-2026-4787)

According to the versions of the python-pip packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to t...

EulerOS Virtualization 2.15.1 : libssh (EulerOS-SA-2026-4562)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A path traversal vulnerability exists in libssh when processing paths received from SCP servers. Attackers can bypass security...

EulerOS Virtualization 2.15.0 : krb5 (EulerOS-SA-2026-4699)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls...

EulerOS Virtualization 2.15.1 : httpd (EulerOS-SA-2026-4760)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A buffer overflow in modproxyhtml in Apache HTTP Server 2.4.67 and earlier allows an attack by an untrusted backend.Users are...

EulerOS Virtualization 2.15.0 : curl (EulerOS-SA-2026-4589)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When doing TLS related transfers with reused easy or multi handles and altering the CURLSSLOPTNOPARTIALCHAIN option, libcurl could...

EulerOS Virtualization 2.15.0 : cifs-utils (EulerOS-SA-2026-4808)

According to the versions of the cifs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before lookin...

EulerOS Virtualization 2.15.0 : nghttp2 (EulerOS-SA-2026-4713)

According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops...

EulerOS Virtualization 2.15.1 : qemu (EulerOS-SA-2026-4791)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the...

EulerOS Virtualization 2.15.1 : libtiff (EulerOS-SA-2026-4765)

According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : 'Hi,\n\nI would like to disclose CVE-2026-36849, a denial of service vulnerability\nin libtiff.\n\n== Summary ==\n\nAn issue in...

EulerOS Virtualization 2.15.1 : unbound (EulerOS-SA-2026-4678)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain condition...

EulerOS Virtualization 2.15.1 : nfs-utils (EulerOS-SA-2026-4770)

According to the versions of the nfs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client t...

Linux Distros Unpatched Vulnerability : CVE-2026-72814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom...

EulerOS Virtualization 2.15.0 : sqlite (EulerOS-SA-2026-4732)

According to the versions of the sqlite package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attacke...

EulerOS Virtualization 2.15.0 : gcc (EulerOS-SA-2026-4693)

According to the versions of the gcc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangleconst, as demonstrated by nm-new.CVE-2022-27943 Tenable...

EulerOS Virtualization 2.15.1 : util-linux (EulerOS-SA-2026-4679)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU Time-of-Check- Time-of-Use vulnerabilit...

EulerOS Virtualization 2.15.1 : haveged (EulerOS-SA-2026-4638)

According to the versions of the haveged package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged...

EulerOS Virtualization 2.15.0 : python-cryptography (EulerOS-SA-2026-4720)

According to the versions of the python-cryptography package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5...

EulerOS Virtualization 2.15.0 : binutils (EulerOS-SA-2026-4588)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort SIGABRT when processing a crafted ELF binary with...

EulerOS Virtualization 2.15.1 : util-linux (EulerOS-SA-2026-4799)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and...

EulerOS Virtualization 2.15.0 : qemu (EulerOS-SA-2026-4740)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in QEMU Virtualization Software the affected version unknown. It has been declared as critical.The CWE...

EulerOS Virtualization 2.15.1 : python-ply (EulerOS-SA-2026-4666)

According to the versions of the python-ply package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...

EulerOS Virtualization 2.15.1 : nghttp2 (EulerOS-SA-2026-4771)

According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content- Length header and body ont...

EulerOS Virtualization 2.15.1 : libarchive (EulerOS-SA-2026-4558)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An issue was discovered in libarchive bsdtar before version 3.8.1 in function applysubstitution in file tar/subst.c when...

EulerOS Virtualization 2.15.0 : lcms2 (EulerOS-SA-2026-4700)

According to the versions of the lcms2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

EulerOS Virtualization 2.15.0 : binutils (EulerOS-SA-2026-4687)

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and...

EulerOS Virtualization 2.15.0 : policycoreutils (EulerOS-SA-2026-4842)

According to the versions of the policycoreutils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : 'Hello,\n\nOn Wed, Jul 15, 2026 at 12:48:22PM +0200, Matthias Gerstner wrote:', '5 CVE Assignments\n==================\n\n...

EulerOS Virtualization 2.15.0 : python-paramiko (EulerOS-SA-2026-4844)

According to the versions of the python-paramiko package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.CVE-2026-44405 Tenable has extracted the...

EulerOS Virtualization 2.15.1 : glibc (EulerOS-SA-2026-4553)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling wordexp with WRDEREUSE in conjunction with WRDEAPPEND in the GNU C Library version 2.0 to version 2.42 may cause the interfa...

EulerOS Virtualization 2.15.0 : nfs-utils (EulerOS-SA-2026-4829)

According to the versions of the nfs-utils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client t...

EulerOS Virtualization 2.15.0 : python-ply (EulerOS-SA-2026-4724)

According to the versions of the python-ply package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile...

EulerOS Virtualization 2.15.0 : python-pillow (EulerOS-SA-2026-4722)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount,...

EulerOS Virtualization 2.15.0 : perl-HTTP-Tiny (EulerOS-SA-2026-4839)

According to the versions of the perl-HTTP-Tiny package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets.When the server return...

EulerOS Virtualization 2.15.0 : gnutls (EulerOS-SA-2026-4817)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that...

EulerOS Virtualization 2.15.0 : glibc (EulerOS-SA-2026-4694)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single...

EulerOS Virtualization 2.15.0 : libgcrypt (EulerOS-SA-2026-4704)

According to the versions of the libgcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to...

EulerOS Virtualization 2.15.0 : mod_http2 (EulerOS-SA-2026-4827)

According to the versions of the modhttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious...

EulerOS Virtualization 2.15.0 : curl (EulerOS-SA-2026-4689)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, has been found in cURL up to 8.19.0 Network Utility Software. Affected by this...

EulerOS Virtualization 2.15.1 : python-pillow (EulerOS-SA-2026-4571)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, n out-of-bounds write may be triggered when loading a...

EulerOS Virtualization 2.15.1 : libarchive (EulerOS-SA-2026-4644)

According to the versions of the libarchive package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libarchive. An Undefined Behavior vulnerability exists in the zisofs decompression logic, caused by improper...

Fedora 44 : kryoptic / rust-blake2b_simd / rust-blake3 / rust-constant_time_eq / etc (2026-f782e1aa07)

The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-f782e1aa07 advisory. Update the lzma-rust2 crate to version 0.23.0. Update typed-path to version 0.13.0. Rebuild sccache with rustls 0.23.46 for RUSTSEC-2026-0346,...

Rocky Linux 9 [CIQ] Security Update: nodejs-packaging / nodejs-packaging-bundler Multiple Vulnerabilities (crlsa-2023_4330)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20234330 advisory. nodejs: mainModule.proto bypass experimental policy mechanism CVE-2023-30581 nodejs: process interuption due to invalid Public Key information in x509...

EulerOS Virtualization 2.15.0 : sssd (EulerOS-SA-2026-4733)

According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the System Security Services Daemon SSSD. The pampasskeychildreaddata function within the PAM passkey responder...

EulerOS Virtualization 2.15.0 : gnutls (EulerOS-SA-2026-4695)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels,...

EulerOS Virtualization 2.15.1 : python3 (EulerOS-SA-2026-4790)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : unicodedata.normalize can take excessive CPU time when processing specially crafted Unicode input containing long runs of combinin...