Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:0824)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0824-1 advisory. - Mozilla: Use-after-free in XSLT parameter processing CVE-2022-26485 - Mozilla: Use-after-free in WebGPU IPC Framework CVE-2022-26486 - expat:...

Scientific Linux Security Update : openldap on SL7.x i686/x86_64 (2022:0621)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0621-1 advisory. - openldap: assertion failure in Certificate List syntax validation CVE-2020-25709 - openldap: assertion failure in CSN normalization with invali...

Scientific Linux Security Update : cyrus-sasl on SL7.x i686/x86_64 (2022:0666)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:0666-1 advisory. - cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands CVE-2022-24407 Note that Nessus has not tested for...

Scientific Linux Security Update : python-pillow on SL7.x i686/x86_64 (2022:0609)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0609-1 advisory. - python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions CVE-2022-22817 - python-pillow: buffer over-read during...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:0514)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0514-1 advisory. - Mozilla: Extensions could have bypassed permission confirmation during update CVE-2022-22754 - Mozilla: Memory safety bugs fixed in Firefox 97...

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x i686/x86_64 (2022:0306)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0306-1 advisory. - OpenJDK: Incomplete deserialization class filtering in ObjectInputStream Serialization, 8264934 CVE-2022-21248 - OpenJDK: Insufficient URI chec...

Scientific Linux Security Update : java-11-openjdk on SL7.x i686/x86_64 (2022:0204)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0204-1 advisory. - OpenJDK: Incomplete deserialization class filtering in ObjectInputStream Serialization, 8264934 CVE-2022-21248 - OpenJDK: Incorrect reading of...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2022:0063)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0063-1 advisory. - kernel: perfeventparseaddrfilter memory CVE-2020-25704 - kernel: fuse: fusedogetattr calls makebadinode in inappropriate situations...

Scientific Linux Security Update : openssl on SL7.x i686/x86_64 (2022:0064)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:0064-1 advisory. - openssl: Read buffer overruns processing ASN.1 strings CVE-2021-3712 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : xorg-x11-server on SL7.x i686/x86_64 (2022:0003)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0003-1 advisory. - xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access CVE-2021-4008 - xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:5046)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:5046-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4 Mozilla: URL leakage when navigating while executing asynchronous function...

Scientific Linux Security Update : mailman on SL7.x x86_64 (2021:4913)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:4913-1 advisory. - mailman: CSRF token bypass allows to perform CSRF attacks and account takeover CVE-2021-42097 - mailman: CSRF token bypass allows to perform CS...

Scientific Linux Security Update : java-11-openjdk on SL7.x i686/x86_64 (2021:3892)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3892-1 advisory. - OpenJDK: Loop in HttpsServer triggered during TLS session close JSSE, 8254967 CVE-2021-35565 - OpenJDK: Incorrect principal selection when usin...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2021:3807)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3807-1 advisory. - 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed CVE-2021-3652 Note that Nessus has not tested for this issue but has...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2021:3801)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3801-1 advisory. - kernel: Improper handling of VMIO|VMPFNMAP vmas in KVM can bypass RO checks CVE-2021-22543 - kernel: powerpc: KVM guest OS users can cause host...

Scientific Linux Security Update : libxml2 on SL7.x i686/x86_64 (2021:3810)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3810-1 advisory. - libxml2: Use after free via namespace node in XPointer ranges CVE-2016-4658 Note that Nessus has not tested for this issue but has instead relied only o...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:3494)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3494-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 CVE-2021-38493 Note that Nessus has not tested for this issue bu...

Scientific Linux Security Update : libsndfile on SL7.x i686/x86_64 (2021:3295)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3295-1 advisory. - libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution CVE-2021-3246 Note that Nessus has not tested for this issue but h...

Scientific Linux Security Update : sssd on SL7.x i686/x86_64 (2021:3336)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3336-1 advisory. - sssd: shell command injection in sssctl CVE-2021-3621 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2021:3028)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3028-1 advisory. - hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 - hw: Vector Register Data Sampling CVE-2020-0548 - hw: L1D Cache Eviction Sampli...