Scientific Linux Security Update : perl-DBD-Pg on SL5.x i386/x86_64

A heap-based buffer overflow flaw was discovered in the pggetline function implementation. If the pggetline or getline functions read large, untrusted records from a database, it could cause an application using these functions to crash or, possibly, execute arbitrary code. CVE-2009-0663 Note:...

Scientific Linux Security Update : pidgin on SL3.x, SL4.x, SL5.x i386/x86_64

An invalid pointer dereference bug was found in the way the Pidgin OSCAR protocol implementation processed lists of contacts. A remote attacker could send a specially crafted contact list to a user running Pidgin, causing Pidgin to crash. CVE-2009-3615 A NULL pointer dereference flaw was found in...

Scientific Linux Security Update : libxml and libxml2 on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-2414 libxml, libxml2, mingw32-libxml2: Stack overflow by parsing root XML element DTD definition CVE-2009-2416 libxml, libxml2, mingw32-libxml2: Pointer use-after-free flaws by parsing Notation and Enumeration attribute types A stack overflow flaw was found in the way libxml processes th...

Scientific Linux Security Update : wget on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-3490 wget: incorrect verification of SSL certificate with NUL in name Daniel Stenberg reported that Wget is affected by the previously published 'null prefix attack', caused by incorrect handling of NULL characters in X.509 certificates. If an attacker is able to get a carefully-crafted...

Scientific Linux Security Update : sudo on SL5.x i386/x86_64

A flaw was discovered in a way sudo handled group specifications in 'run as' lists in the sudoers configuration file. If sudo configuration allowed a user to run commands as any user of some group and the user was also a member of that group, sudo incorrectly allowed them to run defined commands...

Scientific Linux Security Update : xerces-j2 on SL5.x i386/x86_64

CVE-2009-2625 OpenJDK: XML parsing Denial-Of-Service 6845701 A flaw was found in the way the Apache Xerces2 Java Parser processed the SYSTEM identifier in DTDs. A remote attacker could provide a specially crafted XML file, which once parsed by an application using the Apache Xerces2 Java Parser,...

Scientific Linux Security Update : cups on SL3.x i386/x86_64

The previous CUPS security advisor, stated that it fixed CVE-2008-3640 for Scientific Linux 3, 4, and 5. It was discovered this flaw was not properly fixed on Scientific Linux 3, however. CVE-2009-0577 These new packages contain a proper fix for CVE-2008-3640 on Scientific Linux 3. Scientific Lin...

Scientific Linux Security Update : systemtap on SL4.x, SL5.x i386/x86_64

A race condition was discovered in SystemTap that could allow users in the stapusr group to elevate privileges to that of members of the stapdev group and hence root, bypassing directory confinement restrictions and allowing them to insert arbitrary SystemTap kernel modules. CVE-2009-0784...

Scientific Linux Security Update : bind for SL 3.0.x on i386/x86_64

CVE-2009-0696 bind: DoS assertion failure via nsupdate packets A flaw was found in the way BIND handles dynamic update message packets containing the 'ANY' record type. A remote attacker could use this flaw to send a specially crafted dynamic update packet that could cause named to exit with an...

Scientific Linux Security Update : icu on SL5.x i386/x86_64

A flaw was found in the way ICU processed certain, invalid byte sequences during Unicode conversion. If an application used ICU to decode malformed, multibyte character data, it may have been possible to bypass certain content protection mechanisms, or display information in a manner misleading t...

Scientific Linux Security Update : subversion on SL4.x, SL5.x i386/x86_64

CVE-2009-2411 subversion: multiple heap overflow issues Matt Lewis, of Google, reported multiple heap overflow flaws in Subversion server and client when parsing binary deltas. A malicious user with commit access to a server could use these flaws to cause a heap overflow on that server. A malicio...

Scientific Linux Security Update : openssl on SL5.x i386/x86_64

CVE-2009-2409 deprecate MD2 in SSL cert validation Kaminsky CVE-2009-4355 openssl significant memory leak in certain SSLv3 requests DoS It was found that the OpenSSL library did not properly re-initialize its internal state in the SSLlibraryinit function after previous calls to the...

Scientific Linux Security Update : cyrus-imapd on SL4.x, SL5.x i386/x86_64

It was discovered that the Cyrus SASL library cyrus-sasl does not always reliably terminate output from the saslencode64 function used by programs using this library. The Cyrus IMAP server cyrus-imapd relied on this function's output being properly terminated. Under certain conditions, improperly...

Scientific Linux Security Update : newt on SL3.x, SL4.x, SL5.x i386/x86_64

CVE-2009-2905 newt: heap-overflow in textbox when text reflowing A heap-based buffer overflow flaw was found in the way newt processes content that is to be displayed in a text dialog box. A local attacker could issue a specially crafted text dialog box display request direct or via a custom...

Scientific Linux Security Update : ntp on SL4.x, SL5.x i386/x86_64

A flaw was discovered in the way the ntpd daemon checked the return value of the OpenSSL EVPVerifyFinal function. On systems using NTPv4 authentication, this could lead to an incorrect verification of cryptographic signatures, allowing time-spoofing attacks. CVE-2009-0021 Note: This issue only...

Scientific Linux Security Update : gstreamer-plugins-good on SL5.x i386/x86_64

Multiple integer overflow flaws, that could lead to a buffer overflow, were found in the GStreamer Good Plug-ins PNG decoding handler. An attacker could create a specially crafted PNG file that would cause an application using the GStreamer Good Plug-ins library to crash or, potentially, execute...

Scientific Linux Security Update : php on SL3.x, SL4.x, SL5.x i386/x86_64

A heap-based buffer overflow flaw was found in PHP's mbstring extension. A remote attacker able to pass arbitrary input to a PHP script using mbstring conversion functions could cause the PHP interpreter to crash or, possibly, execute arbitrary code. CVE-2008-5557 A flaw was found in the handling...

Scientific Linux Security Update : poppler on SL5.x i386/x86_64

CVE-2009-3608 xpdf/poppler: integer overflow in ObjectStream::ObjectStream oCERT-2009-016 CVE-2009-3609 xpdf/poppler: ImageStream::ImageStream integer overflow CVE-2009-3603 xpdf/poppler: SplashBitmap::SplashBitmap integer overflow Multiple integer overflow flaws were found in poppler. An attacke...

Scientific Linux Security Update : httpd on SL5.x i386/x86_64

A denial of service flaw was found in the Apache modproxy module when it was used as a reverse proxy. A remote attacker could use this flaw to force a proxy process to consume large amounts of CPU time. CVE-2009-1890 A denial of service flaw was found in the Apache moddeflate module. This module...

Scientific Linux Security Update : libwmf on SL4.x, SL5.x i386/x86_64

A pointer use-after-free flaw was found in the GD graphics library embedded in libwmf. An attacker could create a specially crafted WMF file that would cause an application using libwmf to crash or, potentially, execute arbitrary code as the user running the application when opened by a victim...