Scientific Linux Security Update : selinux-policy on SL6.x i386/x86_64 (20120213)

The selinux-policy packages contain the rules that govern how confined processes run on the system. This update fixes the following bug : - An incorrect SELinux policy prevented the qpidd service from starting. These selinux-policy packages contain updated SELinux rules, which allow the qpidd...

Scientific Linux Security Update : sudo on SL5.x, SL6.x i386/x86_64 (20120716)

The sudo superuser do utility allows system administrators to give certain users the ability to run commands as root. A flaw was found in the way the network matching code in sudo handled multiple IP networks listed in user specification configuration directives. A user, who is authorized to run...

Scientific Linux Security Update : evolution on SL4.x, SL3.x i386/x86_64

A flaw was found in the way Evolution processed certain APOP authentication requests. A remote attacker could potentially acquire certain portions of a user's authentication credentials by sending certain responses when evolution-data-server attempted to authenticate against an APOP server...

Scientific Linux Security Update : polkit on SL6.x i386/x86_64

A race condition flaw was found in the PolicyKit pkexec utility and polkitd daemon. A local user could use this flaw to appear as a privileged user to pkexec, allowing them to execute arbitrary commands as root by running those commands with pkexec. CVE-2011-1485 The system must be rebooted for...

Scientific Linux Security Update : ipsec-tools on SL5.x i386/x86_64

A denial of service flaw was found in the ipsec-tools racoon daemon. It was possible for a remote attacker, with knowledge of an existing ipsec tunnel, to terminate the ipsec connection between two machines. CVE-2007-1841 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text i...

Scientific Linux Security Update : freetype on SL4.x, SL5.x i386/x86_64

A heap-based buffer overflow flaw was found in the way the FreeType font rendering engine processed certain TrueType GX fonts. If a user loaded a specially crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code...

Scientific Linux Security Update : cups on SL3.x, SL4.x, SL5.x i386/x86_64

A buffer overflow flaw was discovered in the SGI image format decoding routines used by the CUPS image converting filter 'imagetops'. An attacker could create a malicious SGI image file that could, possibly, execute arbitrary code as the 'lp' user if the file was printed. CVE-2008-3639 An integer...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issues : - instances of unsafe sprintf use were found in the Linux kernel Bluetooth implementation. Creating a large number of Bluetooth L2CAP, SCO, or RFCOMM sockets could result in arbitrary memory pages being overwritten. A local, unprivileged user coul...

Scientific Linux Security Update : krb5-appl on SL6.x i386/x86_64

The krb5-appl packages provide Kerberos-aware telnet, ftp, rcp, rsh, and rlogin clients and servers. While these have been replaced by tools such as OpenSSH in most environments, they remain in use in others. It was found that gssftp, a Kerberos-aware FTP server, did not properly drop privileges....

Scientific Linux Security Update : openssl096b on SL3.x, SL4.x i386/x86_64

CVE-2009-3245 openssl: missing bnwexpand return value checks It was discovered that OpenSSL did not always check the return value of the bnwexpand function. An attacker able to trigger a memory allocation failure in that function could cause an application using the OpenSSL library to crash or,...

Scientific Linux Security Update : avahi on SL5.x i386/x86_64

Hugo Dias discovered a denial of service flaw in avahi-daemon. A remote attacker on the same local area network LAN could send a specially crafted mDNS Multicast DNS packet that would cause avahi-daemon to exit unexpectedly due to a failed assertion check. CVE-2008-5081 After installing the updat...

Scientific Linux Security Update : xorg-x11-server on SL5.x i386/x86_64

An incorrect calculation flaw was discovered in the X.Org Render extension. A malicious, authorized client could exploit this issue to crash the X.Org server or, potentially, execute arbitrary code with root privileges. CVE-2010-1166 All running X.Org server instances must be restarted for this...

Scientific Linux Security Update : perl on SL3.x, SL4.x, SL5.x i386/x86_64

A flaw was found in Perl's regular expression engine. A specially crafted regular expression with Unicode characters could trigger a buffer overflow, causing Perl to crash, or possibly execute arbitrary code with the privileges of the user running Perl. CVE-2008-1927 %NASLMINLEVEL 70300 C Tenable...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

CVE-2007-4567 kernel: ipv6hopjumbo remote system crash CVE-2009-4537 kernel: r8169 issue reported at 26c3 CVE-2009-4538 kernel: e1000e frame fragment issue CVE-2009-4536 kernel: e1000 issue reported at 26c3 This update fixes the following security issues : - a flaw was found in the IPv6 Extension...

Scientific Linux Security Update : ntp on SL4.x i386/x86_64

A buffer overflow flaw was discovered in the ntpd daemon's NTPv4 authentication code. If ntpd was configured to use public key cryptography for NTP packet authentication, a remote attacker could use this flaw to send a specially crafted request packet that could crash ntpd or, potentially, execut...

Scientific Linux Security Update : bind on SL5.x, SL6.x i386/x86_64

"The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - It was found that the receive hook in the ipipinit function in the ipip module, and in the ipgreinit function in the ipgre module, could be called before netwo...

Scientific Linux Security Update : bind97 on SL5.x i386/x86_64

"The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120710)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - A NULL pointer dereference flaw was found in the nfctfrag6reasm function in the Linux kernel's netfilter IPv6 connection tracking implementation. A remote...

Scientific Linux Security Update : php on SL6.x i386/x86_64

A flaw was found in the way PHP converted certain floating point values from string representation to a number. If a PHP script evaluated an attacker's input in a numeric context, the PHP interpreter could cause high CPU usage until the script execution time limit is reached. This issue only...