Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20161220)

Security Fixes : - A use-after-free vulnerability was found in the kernels socket recvmmsg subsystem. This may allows remote attackers to corrupt memory and may allow execution of arbitrary code. This corruption takes place during the error handling routines within sysrecvmmsg function...

OpenSSL TLS DTLS Overly-long Heartbeat Response Information Disclosure

An information disclosure vulnerability exists in OpenSSL. The vulnerability is due to an error when handling TLS/DTLS heartbeat packets. An attacker can leverage this vulnerability to disclose memory contents of a connected client or server...