According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its     packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap     bytes to be copied into the generated TGA file. This issue is fixed in version 12.3.0.(CVE-2026-59198)

    Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image     dimensions from the GD 2.x header and stored them in self._size without calling     Image._decompression_bomb_check(), allowing a crafted .gd file to trigger excessive C-heap allocation when     loaded. This issue is fixed in version 12.3.0.(CVE-2026-55380)

    Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in     PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length field without bounding     the decompressed output size, allowing a crafted FlateDecode PDF stream to exhaust memory from a small     file. This issue is fixed in version 12.3.0.(CVE-2026-59200)

    Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and     height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling     Image._decompression_bomb_check(), bypassing Pillow's documented decompression bomb protection and     allowing excessive memory allocation. This issue is fixed in version 12.3.0.(CVE-2026-55379)

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut)     API can trigger controlled native heap corruption when the caller supplies an output image whose mode does     not match the transform's declared output mode. This issue is fixed in version 12.3.0.(CVE-2026-59205)

    Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-     glyph images into a combined bitmap with Image.new('1', (xsize, ysize)) without calling     Image._decompression_bomb_check(), allowing a font to trigger excessive allocation during conversion or     saving. This issue is fixed in version 12.3.0.(CVE-2026-54060)

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native     heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter()     calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes     output dimensions with unchecked signed int arithmetic. This issue is fixed in version     12.3.0.(CVE-2026-59197)

    Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe     shell command by directly embedding a file path into an f-string without escaping and passed the result to     subprocess.Popen(..., shell=True), allowing shell metacharacters in the file path to inject arbitrary     cmd.exe commands. This issue is fixed in version 12.3.0.(CVE-2026-55798)

    Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates     total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a     crafted tiled JPEG2000 file to force substantially higher transient memory usage and trigger out-of-memory     failures during decoding. This issue is fixed in version 12.3.0.(CVE-2026-59204)

    Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a     native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in     Image.paste(), Image.crop(), or Image.alpha_composite(). This issue is fixed in version     12.3.0.(CVE-2026-59199)

    Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph     dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling     Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation.
    This issue is fixed in version 12.3.0.(CVE-2026-54059)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization python-pillow security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:50222 advisory.

    Red Hat Satellite is a system management solution that allows organizations     to configure and maintain their systems without the necessity to provide     public Internet access to their servers or other client systems. It     performs provisioning and configuration management of predefined standard     operating environments.

    Security Fix(es):

    * puppet-agent: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230)

    * rubygem-katello: missing repository authorization in content_uploads exposes cross-product content     existence (CVE-2026-12515)

    * puppetserver: HTTP request smuggling via chunked extension quoted-string parsing (CVE-2026-2332)

    * python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526)

    * python-pillow: Pillow: Denial of Service via crafted PCF font data (CVE-2026-54059)

    * python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files     (CVE-2026-54060)

    * rubygem-faraday-cookie_jar: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)

    * python-pillow: Pillow: Denial of Service via crafted BDF font file (CVE-2026-55379)

    * python-pillow: Pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380)

    * rubygem-nokogiri: Nokogiri: Denial of Service or Information Disclosure via invalid encoding handling     (CVE-2026-57236)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

    Bug Fix(es):

    * API endpoint GET /api/host_packages/installed_packages in apidoc is wrong (SAT-48096)

    * Unable to save bookmark report under Hosts > All Hosts > Compliance > Reports (SAT-48150)

    * Update of scap-security-guide-satellite package sources (SAT-48147)

    * Switch Satellite 6.17 to OpenVox (SAT-44867)

    * Katello::Errors::Pulp3Error: nextval: reached maximum value of sequence container_blobmanifest_id_seq'     during container image sync (SAT-48303)

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
377165	EulerOS Virtualization 2.15.0 : python-pillow (EulerOS-SA-2026-4845)	Nessus	Huawei Local Security Checks	2026/11/7	2026/11/7	high
377372	EulerOS Virtualization 2.15.1 : python-pillow (EulerOS-SA-2026-4786)	Nessus	Huawei Local Security Checks	2026/11/7	2026/11/7	high
331967	RHEL 9 : Satellite 6.17.10 Async Update (Important) (RHSA-2026:50222)	Nessus	Red Hat Local Security Checks	2026/8/4	2026/10/27	medium

检测

插件搜索

high

high

medium