Scientific Linux Security Update : libpng on SL3.x, SL4.x, SL5.x i386/x86_64

A flaw was discovered in libpng that could result in libpng trying to free random memory if certain, unlikely error conditions occurred. If a carefully-crafted PNG file was loaded by an application linked against libpng, it could cause the application to crash or, potentially, execute arbitrary...

Scientific Linux Security Update : gstreamer-plugins on SL3.x, SL4.x i386/x86_64

An array indexing error was found in the GStreamer's QuickTime media file format decoding plug-in. An attacker could create a carefully-crafted QuickTime media .mov file that would cause an application using GStreamer to crash or, potentially, execute arbitrary code if played by a victim...

Scientific Linux Security Update : libpng on SL3.x i386/x86_64

Several flaws were discovered in the way libpng handled various PNG image chunks. An attacker could create a carefully crafted PNG image file in such a way that it could cause an application linked with libpng to crash when the file was manipulated. CVE-2007-5269 %NASLMINLEVEL 70300 C Tenable...

Scientific Linux Security Update : seamonkey on SL4.x i386/x86_64

SeaMonkey is an open source web browser, email and newsgroup client, IRC chat client, and HTML editor. It was found that a Certificate Authority CA issued a fraudulent HTTPS certificate. This update renders any HTTPS certificates signed by that CA as untrusted, except for a select few. The now...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

CVE-2005-4881 kernel: netlink: fix numerous padding memleaks CVE-2009-3228 kernel: tc: uninitialised kernel memory leak This update fixes the following security issues : - multiple, missing initialization flaws were found in the Linux kernel. Padding data in several core network structures was no...

Scientific Linux Security Update : mysql on SL5.x, SL4.x i386/x86_64

A flaw was found in a way MySQL handled symbolic links when database tables were created with explicit 'DATA' and 'INDEX DIRECTORY' options. An authenticated user could create a table that would overwrite tables in other databases, causing destruction of data or allowing the user to elevate...

Scientific Linux Security Update : pam_krb5 on SL5.x i386/x86_64

A flaw was found in pamkrb5. In some non-default configurations specifically, those where pamkrb5 would be the first module to prompt for a password, the text of the password prompt varied based on whether or not the username provided was a username known to the system. A remote attacker could us...

Scientific Linux Security Update : unzip on SL3.x i386/x86_64

An invalid pointer flaw was found in unzip. If a user ran unzip on a specially crafted file, an attacker could execute arbitrary code with that user's privileges. CVE-2008-0888 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issue : - The rdspagecopyuser function in the Linux kernel Reliable Datagram Sockets RDS protocol implementation was missing sanity checks. A local, unprivileged user could use this flaw to escalate their privileges. CVE-2010-3904, Important The system mus...

Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey. CVE-2009-1392, CVE-2009-1833, CVE-2009-1838, CVE-2009-1841 A flaw was found in the...

Scientific Linux Security Update : bind on SL5.x i386/x86_64

It was discovered that named did not invalidate previously cached RRSIG records when adding an NCACHE record for the same entry to the cache. A remote attacker allowed to send recursive DNS queries to named could use this flaw to crash named. CVE-2010-3613 A flaw was found in the DNSSEC validatio...

Scientific Linux Security Update : perl on SL3.x, SL4.x, SL5.x i386/x86_64

A flaw was found in Perl's regular expression engine. A specially crafted regular expression with Unicode characters could trigger a buffer overflow, causing Perl to crash, or possibly execute arbitrary code with the privileges of the user running Perl. CVE-2008-1927 %NASLMINLEVEL 70300 C Tenable...

Scientific Linux Security Update : avahi on SL5.x i386/x86_64

Hugo Dias discovered a denial of service flaw in avahi-daemon. A remote attacker on the same local area network LAN could send a specially crafted mDNS Multicast DNS packet that would cause avahi-daemon to exit unexpectedly due to a failed assertion check. CVE-2008-5081 After installing the updat...

Scientific Linux Security Update : xorg-x11-server on SL5.x i386/x86_64

An incorrect calculation flaw was discovered in the X.Org Render extension. A malicious, authorized client could exploit this issue to crash the X.Org server or, potentially, execute arbitrary code with root privileges. CVE-2010-1166 All running X.Org server instances must be restarted for this...

Scientific Linux Security Update : openssl096b on SL3.x, SL4.x i386/x86_64

CVE-2009-3245 openssl: missing bnwexpand return value checks It was discovered that OpenSSL did not always check the return value of the bnwexpand function. An attacker able to trigger a memory allocation failure in that function could cause an application using the OpenSSL library to crash or,...

Scientific Linux Security Update : bind on SL5.x, SL6.x i386/x86_64

"The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Scientific Linux Security Update : qt on SL5.x, SL4.x, SL3.x i386/x86_64

A flaw was found in the way Qt expanded certain UTF8 characters. It was possible to prevent a Qt-based application from properly sanitizing user supplied input. This could, for example, result in a cross-site scripting attack against the Konqueror web browser. CVE-2007-0242 A buffer overflow flaw...

Scientific Linux Security Update : xen on SL5.x i386/x86_64

Note: Troy Dawson has tested this update on a machine hosting both paravirtualized and fully virtualized machines, both 32 bit and 64 bit. He did the update while all the machines were running, none of them had any problems. He also tried stopping, starting, and rebooting several of the machines...

Scientific Linux Security Update : openssh on SL4.x i386/x86_64

OpenSSH stores hostnames, IP addresses, and keys in plaintext in the knownhosts file. A local attacker that has already compromised a user's SSH account could use this information to generate a list of additional targets that are likely to have the same password or key. CVE-2005-2666 %NASLMINLEVE...

Scientific Linux Security Update : curl on SL3.x i386/x86_64

Wesley Miaw discovered that when deflate compression was used, libcurl could call the registered write callback function with data exceeding the documented limit. A malicious server could use this flaw to crash an application using libcurl or, potentially, execute arbitrary code. Note: This issue...