The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0796 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-8194:
    There is a defect in the CPython tarfile module affecting the TarFile extraction and entry     enumeration APIs. The tar implementation would process tar archives with negative offsets without error,     resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives.

    This vulnerability can be mitigated by including the following patch after importing the tarfile     module: https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:3706-1 advisory.

    Update to version 3.13.7.

    - Fixes in 3.13.7:
      * gh-137583: Fix a deadlock introduced in 3.13.6 when a call         to ssl.SSLSocket.recv was blocked in one thread, and then         another method on the object (such as ssl.SSLSocket.send) was         subsequently called in another thread.
      * gh-137044: Return large limit values as positive integers         instead of negative integers in resource.getrlimit().
        Accept large values and reject negative values (except         RLIM_INFINITY) for limits in resource.setrlimit().
      * gh-136914: Fix retrieval of doctest.DocTest.lineno         for objects decorated with functools.cache() or         functools.cached_property.
      * gh-131788: Make ResourceTracker.send from multiprocessing         re-entrant safe
      * gh-136155: We are now checking for fatal errors in EPUB         builds in CI.
      * gh-137400: Fix a crash in the free threading build when         disabling profiling or tracing across all threads with         PyEval_SetProfileAllThreads() or PyEval_SetTraceAllThreads()         or their Python equivalents threading.settrace_all_threads()         and threading.setprofile_all_threads().

    - Fixes in 3.13.6:
      * Security
        - gh-135661: Fix parsing start and end tags in           html.parser.HTMLParser according to the HTML5 standard.
            - Whitespaces no longer accepted between </ and the tag               name. E.g. </ script> does not end the script section.
            - Vertical tabulation (\v) and non-ASCII whitespaces no               longer recognized as whitespaces. The only whitespaces               are \t\n\r\f and space.
            - Null character (U+0000) no longer ends the tag name.
            - Attributes and slashes after the tag name in end tags               are now ignored, instead of terminating after the first               > in quoted attribute value. E.g. </script/foo='>'/>.
            - Multiple slashes and whitespaces between the last               attribute and closing > are now ignored in both start               and end tags. E.g. <a foo=bar/ //>.
            - Multiple = between attribute name and value are no               longer collapsed. E.g. <a foo==bar> produces attribute               foo with value =bar.
        - gh-102555: Fix comment parsing in html.parser.HTMLParser           according to the HTML5 standard. --!> now ends the comment.
          -- > no longer ends the comment. Support abnormally ended           empty comments <--> and <--->.
        - gh-135462: Fix quadratic complexity in processing specially           crafted input in html.parser.HTMLParser. End-of-file errors           are now handled according to the HTML5 specs  comments and           declarations are automatically closed, tags are ignored           (CVE-2025-6069, bsc#1244705).
        - gh-118350: Fix support of escapable raw text mode (elements           textarea and title) in html.parser.HTMLParser.
      * Core and Builtins
        - gh-58124: Fix name of the Python encoding in Unicode errors           of the code page codec: use cp65000 and cp65001 instead           of CP_UTF7 and CP_UTF8 which are not valid Python code           names. Patch by Victor Stinner.
        - gh-137314: Fixed a regression where raw f-strings           incorrectly interpreted escape sequences in format           specifications. Raw f-strings now properly preserve literal           backslashes in format specs, matching the behavior from           Python 3.11. For example, rf'{obj:\xFF}' now correctly           produces '\\xFF' instead of '?'. Patch by Pablo Galindo.
        - gh-136541: Fix some issues with the perf trampolines           on x86-64 and aarch64. The trampolines were not being           generated correctly for some cases, which could lead to           the perf integration not working correctly. Patch by Pablo           Galindo.
        - gh-109700: Fix memory error handling in           PyDict_SetDefault().
        - gh-78465: Fix error message for cls.__new__(cls, ...) where           cls is not instantiable builtin or extension type (with           tp_new set to NULL).
        - gh-135871: Non-blocking mutex lock attempts now return           immediately when the lock is busy instead of briefly           spinning in the free threading build.
        - gh-135607: Fix potential weakref races in an objects           destructor on the free threaded build.
        - gh-135496: Fix typo in the f-string conversion type error           (exclamanation -> exclamation).
        - gh-130077: Properly raise custom syntax errors when           incorrect syntax containing names that are prefixes of soft           keywords is encountered. Patch by Pablo Galindo.
        - gh-135148: Fixed a bug where f-string debug expressions           (using =) would incorrectly strip out parts of strings           containing escaped quotes and # characters. Patch by Pablo           Galindo.
        - gh-133136: Limit excess memory usage in the free threading           build when a large dictionary or list is resized and           accessed by multiple threads.
        - gh-132617: Fix dict.update() modification check that could           incorrectly raise a dict mutated during update error when           a different dictionary was modified that happens to share           the same underlying keys object.
        - gh-91153: Fix a crash when a bytearray is concurrently           mutated during item assignment.
        - gh-127971: Fix off-by-one read beyond the end of a string           in string search.
        - gh-125723: Fix crash with gi_frame.f_locals when generator           frames outlive their generator. Patch by Mikhail Efimov.
      * Library
        - gh-132710: If possible, ensure that uuid.getnode()           returns the same result even across different processes.
          Previously, the result was constant only within the same           process. Patch by B?n?dikt Tran.
        - gh-137273: Fix debug assertion failure in           locale.setlocale() on Windows.
        - gh-137257: Bump the version of pip bundled in ensurepip to           version 25.2
        - gh-81325: tarfile.TarFile now accepts a path-like when           working on a tar archive. (Contributed by Alexander Enrique           Urieles Nieto in gh-81325.)
        - gh-130522: Fix unraisable TypeError raised during           interpreter shutdown in the threading module.
        - gh-130577: tarfile now validates archives to ensure member           offsets are non-negative. (Contributed by Alexander Enrique           Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249).
        - gh-136549: Fix signature of threading.excepthook().
        - gh-136523: Fix wave.Wave_write emitting an unraisable when           open raises.
        - gh-52876: Add missing keepends (default True)           parameter to codecs.StreamReaderWriter.readline() and           codecs.StreamReaderWriter.readlines().
        - gh-85702: If zoneinfo._common.load_tzdata is given a           package without a resource a zoneinfo.ZoneInfoNotFoundError           is raised rather than a PermissionError. Patch by Victor           Stinner.
        - gh-134759: Fix UnboundLocalError in           email.message.Message.get_payload() when the payload to           decode is a bytes object. Patch by Kliment Lamonov.
        - gh-136028: Fix parsing month names containing  (U+0130,           LATIN CAPITAL LETTER I WITH DOT ABOVE) in time.strptime().
          This affects locales az_AZ, ber_DZ, ber_MA and crh_UA.
        - gh-135995: In the palmos encoding, make byte 0x9b decode to            (U+203A - SINGLE RIGHT-POINTING ANGLE QUOTATION MARK).
        - gh-53203: Fix time.strptime() for %c and %x formats on           locales byn_ER, wal_ET and lzh_TW, and for %X format on           locales ar_SA, bg_BG and lzh_TW.
        - gh-91555: An earlier change, which was introduced in           3.13.4, has been reverted. It disabled logging for a logger           during handling of log messages for that logger. Since the           reversion, the behaviour should be as it was before 3.13.4.
        - gh-135878: Fixes a crash of types.SimpleNamespace on free           threading builds, when several threads were calling its
          __repr__() method at the same time.
        - gh-135836: Fix IndexError in           asyncio.loop.create_connection() that could occur when           non-OSError exception is raised during connection and           sockets close() raises OSError.
        - gh-135836: Fix IndexError in           asyncio.loop.create_connection() that could occur when the           Happy Eyeballs algorithm resulted in an empty exceptions           list during connection attempts.
        - gh-135855: Raise TypeError instead of SystemError when
          _interpreters.set___main___attrs() is passed a non-dict           object. Patch by Brian Schubert.
        - gh-135815: netrc: skip security checks if os.getuid() is           missing. Patch by B?n?dikt Tran.
        - gh-135640: Address bug where it was possible to call           xml.etree.ElementTree.ElementTree.write() on an ElementTree           object with an invalid root element. This behavior blanked           the file passed to write if it already existed.
        - gh-135444: Fix asyncio.DatagramTransport.sendto() to           account for datagram header size when data cannot be sent.
        - gh-135497: Fix os.getlogin() failing for longer usernames           on BSD-based platforms.
        - gh-135487: Fix reprlib.Repr.repr_int() when given integers           with more than sys.get_int_max_str_digits() digits. Patch           by B?n?dikt Tran.
        - gh-135335: multiprocessing: Flush stdout and stderr after           preloading modules in the forkserver.
        - gh-135244: uuid: when the MAC address cannot be           determined, the 48-bit node ID is now generated with a           cryptographically-secure pseudo-random number generator           (CSPRNG) as per RFC 9562, ?6.10.3. This affects uuid1().
        - gh-135069: Fix the Invalid error handling exception in           encodings.idna.IncrementalDecoder to correctly replace the           errors parameter.
        - gh-134698: Fix a crash when calling methods of           ssl.SSLContext or ssl.SSLSocket across multiple threads.
        - gh-132124: On POSIX-compliant systems,           multiprocessing.util.get_temp_dir() now ignores TMPDIR           (and similar environment variables) if the path length of           AF_UNIX socket files exceeds the platform-specific maximum           length when using the forkserver start method. Patch by           B?n?dikt Tran.
        - gh-133439: Fix dot commands with trailing spaces are           mistaken for multi-line SQL statements in the sqlite3           command-line interface.
        - gh-132969: Prevent the ProcessPoolExecutor executor thread,           which remains running when shutdown(wait=False), from           attempting to adjust the pools worker processes after           the object state has already been reset during shutdown.
          A combination of conditions, including a worker process           having terminated abormally, resulted in an exception and           a potential hang when the still-running executor thread           attempted to replace dead workers within the pool.
        - gh-130664: Support the '_' digit separator in formatting           of the integral part of Decimals. Patch by Sergey B           Kirpichev.
        - gh-85702: If zoneinfo._common.load_tzdata is given a           package without a resource a ZoneInfoNotFoundError is           raised rather than a IsADirectoryError.
        - gh-130664: Handle corner-case for Fractions formatting:
          treat zero-padding (preceding the width field by a zero           ('0') character) as an equivalent to a fill character of           '0' with an alignment type of '=', just as in case of           floats.
      * Tools/Demos
        - gh-135968: Stubs for strip are now provided as part of an           iOS install.
      * Tests
        - gh-135966: The iOS testbed now handles the app_packages           folder as a site directory.
        - gh-135494: Fix regrtest to support excluding tests from
          --pgo tests. Patch by Victor Stinner.
        - gh-135489: Show verbose output for failing tests during PGO           profiling step with enable-optimizations.
      * Documentation
        - gh-135171: Document that the iterator for the leftmost for           clause in the generator expression is created immediately.
      * Build
        - gh-135497: Fix the detection of MAXLOGNAME in the           configure.ac script.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers.(CVE-2025-1795)

    There is an issue in CPython when using `bytes.decode('unicode_escape', error='ignore|replace')`. If you     are not using the 'unicode_escape' encoding or an error handler your usage is not affected. To work-around     this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except     catching the DecodeError.(CVE-2025-4516)

    The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted     malformed inputs potentially leading to amplified denial-of-service.(CVE-2025-6069)

    There is a defect in the CPython 'tarfile' module affecting the 'TarFile' extraction and entry enumeration     APIs. The tar implementation would process tar archives with negative offsets without error, resulting in     an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This vulnerability     can be mitigated by including the following patch after importing the 'tarfile' module:
    https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1(CVE-2025-8194)

Tenable has extracted the preceding description block directly from the EulerOS python3 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992145 advisory.

    There is a defect in the CPython tarfile module affecting the TarFile extraction and entry     enumeration APIs. The tar implementation would process tar archives with negative offsets without error,     resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives.

    This vulnerability can be mitigated by including the following patch after importing the tarfile     module: https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02778-1 advisory.

    - CVE-2025-4516: use-after-free in the unicode-escape decoder when using the error handler (bsc#1243273).
    - CVE-2024-12718: Fixed extraction filter bypass that allowed file metadata modification outside     extraction directory (bsc#1244056)
    - CVE-2025-4138: Fixed issue that might allow symlink targets to point outside the destination directory,     and the modification of some file metadata (bsc#1244059)
    - CVE-2025-4330: Fixed extraction filter bypass that allowed linking outside extraction directory     (bsc#1244060)
    - CVE-2025-4435: Fixed Tarfile extracts filtered members when errorlevel=0 (bsc#1244061)
    - CVE-2025-4517: Fixed arbitrary filesystem writes outside the extraction directory during extraction with     filter='data' (bsc#1244032)
    - CVE-2025-6069: Fixed worst case quadratic complexity when processing certain crafted malformed inputs     with HTMLParser (bsc#1244705)
    - CVE-2025-8194: Fixed denial of service caused by tar archives with negative offsets (bsc#1247249)

    Other fixes:
    - Limit buffer size for IPv6 address parsing (bsc#1244401).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency     on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively     nested documents.(CVE-2025-12084)

    The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory (EOCD) Locator     record offset value would not be used to locate the ZIP64 EOCD record, instead the ZIP64 EOCD record would     be assumed to be the previous record in the ZIP archive. This could be abused to create ZIP archives that     are handled differently by the 'zipfile' module compared to other ZIP implementations.Remediation     maintains this behavior, but checks that the offset specified in the ZIP64 EOCD Locator record matches the     expected value.(CVE-2025-8291)

    CPython 3.9 and earlier doesn't disallow configuring an empty list ('[]') for     SSLContext.set_npn_protocols() which is an invalid value for the underlying OpenSSL API. This results in a     buffer over-read when NPN is used (see CVE-2024-5535 for OpenSSL). This vulnerability is of low severity     due to NPN being not widely used and specifying an empty list likely being uncommon in-practice (typically     a protocol name would be configured).(CVE-2024-5642)

    When reading an HTTP response from a server, if no read amount is specified, the default behavior will be     to use Content-Length. This allows a malicious server to cause the client to read large amounts of data     into memory, potentially causing OOM or other DoS.(CVE-2025-13836)

    When loading a plist file, the plistlib module reads data in size specified by the file itself, meaning a     malicious file can cause OOM and DoS issues(CVE-2025-13837)

    The html.parser.HTMLParser class had worse-case quadratic complexity when processing certain crafted     malformed inputs potentially leading to amplified denial-of-service.(CVE-2025-6069)

    During an address list folding when a separating comma ends up on a folded line and that line is to be     unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the     separating comma remains a plan comma. This can result in the address header being misinterpreted by some     mail servers.(CVE-2025-1795)

    There is an issue in CPython when using `bytes.decode('unicode_escape', error='ignore|replace')`. If you     are not using the 'unicode_escape' encoding or an error handler your usage is not affected. To work-around     this issue you may stop using the error= handler and instead wrap the bytes.decode() call in a try-except     catching the DecodeError.(CVE-2025-4516)

    Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata.You are affected by this vulnerability if using the     tarfilemodule to extract untrusted tar archives using TarFile.extractall()or TarFile.extract()using     the filter=parameter with a value of 'data'or 'tar'. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.Note that     for Python 3.14 or later the default value of filter=changed from 'no filtering' to `'data', so if you     are relying on this new default behavior then your usage is also affected.Note that none of these     vulnerabilities significantly affect the installation of source distributions which are tar archives as     source distributions already allow arbitrary code execution during the build process. However when     evaluating source distributions it's important to avoid installing source distributions with suspicious     links.(CVE-2025-4330)

    Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata.You are affected by this vulnerability if using the     tarfilemodule to extract untrusted tar archives using TarFile.extractall()or TarFile.extract()using     the filter=parameter with a value of 'data'or 'tar'. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.Note that     for Python 3.14 or later the default value of filter=changed from 'no filtering' to `'data', so if you     are relying on this new default behavior then your usage is also affected.Note that none of these     vulnerabilities significantly affect the installation of source distributions which are tar archives as     source distributions already allow arbitrary code execution during the build process. However when     evaluating source distributions it's important to avoid installing source distributions with suspicious     links.(CVE-2025-4138)

    There is a defect in the CPython tarfile module affecting the TarFile extraction and entry     enumeration APIs. The tar implementation would process tar archives with negative offsets without error,     resulting in an infinite loop and deadlock during the parsing of maliciously crafted tar archives. This     vulnerability can be mitigated by including the following patch after importing the tarfile     module: https://gist.github.com/sethmlarson/1716ac5b82b73dbcbf23ad2eff8b33e1(CVE-2025-8194)

    Allows arbitrary filesystem writes outside the extraction directory during extraction with filter='data'.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of 'data'or     'tar'. See the tarfile extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Note that     for Python 3.14 or later the default value of filter=changed from 'no filtering' to `'data', so if you     are relying on this new default behavior then your usage is also affected. Note that none of these     vulnerabilities significantly affect the installation of source distributions which are tar archives as     source distributions already allow arbitrary code execution during the build process. However when     evaluating source distributions it's important to avoid installing source distributions with suspicious     links.(CVE-2025-4517)

    When using a TarFile.errorlevel = 0and extracting with a filter the documented behavior is that any     filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel =     0in affected versions is that the member would still be extracted and not skipped.(CVE-2025-4435)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization python3 security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1777940906 advisory.

  - The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line     options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize     URLs prior to passing to webbrowser.open(). (CVE-2026-4519)

  - Mitgation of CVE-2026-4519 was incomplete. If the URL contained %action the mitigation could be bypassed     for certain browser types the webbrowser.open() API could have commands injected into the underlying     shell. See CVE-2026-4519 for details. (CVE-2026-4786)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
271147	TencentOS Server 3: python3 (TSSA-2025:0796)	Nessus	Tencent Local Security Checks	2025/10/22	2026/4/30	high
271166	SUSE SLED15: libpython3_13-1_0 / python313 / python313-base / python313-curses / etc (SUSE-SU-2025:3706-1)	Nessus	SuSE Local Security Checks	2025/10/22	2026/6/25	high
278439	EulerOS 2.0 SP13 : python3 (EulerOS-SA-2025-2508)	Nessus	Huawei Local Security Checks	2025/12/11	2026/4/30	low
280072	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python3 (UTSA-2025-992145)	Nessus	Unity Linux Local Security Checks	2025/12/26	2026/9/22	high
278717	SUSE SLED15: libpython3_6m1_0 / libpython3_6m1_0-32bit / python3 / python3-base / etc (SUSE-SU-2025:02778-1)	Nessus	SuSE Local Security Checks	2025/12/15	2026/6/26	medium
302720	EulerOS Virtualization 2.12.1 : python3 (EulerOS-SA-2026-1455)	Nessus	Huawei Local Security Checks	2026/3/17	2026/3/17	medium
352665	CentOS Linux 8 [TuxCare] Security Update: python2 / python2-debug / python2-devel / python2-libs / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1777940906)	Nessus	CentOS Local Security Checks	2026/9/30	2026/9/30	high

检测

插件搜索

high

high

low

high

medium

medium

high