Scientific Linux Security Update : kernel on SL5.x i386/x86_64

Security fixes : - a NULL pointer dereference flaw was found in the sctprcvootb function in the Linux kernel Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a specially crafted SCTP packet to a target system, resulting in a denial of service. CVE-2010-0008,...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issues : - A NULL pointer dereference flaw was found in the iosubmitone function in the Linux kernel asynchronous I/O implementation. A local, unprivileged user could use this flaw to cause a denial of service. CVE-2010-3066, Moderate - A flaw was found in...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issues : - A missing boundary check was found in the dvbcaioctl function in the Linux kernel's av7110 module. On systems that use old DVB cards that require the av7110 module, a local, unprivileged user could use this flaw to cause a denial of service or...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

Security fixes : - memory leaks were found on some error paths in the icmpsend function in the Linux kernel. This could, potentially, cause the network connectivity to cease. CVE-2009-0778, Important - Chris Evans reported a deficiency in the clone system call when called with the CLONEPARENT fla...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - Flaws in the AGPGART driver implementation when handling certain IOCTL commands could allow a local user to cause a denial of service or escalate their...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

These updated packages fix the following security issues : - the absence of a protection mechanism when attempting to access a critical section of code has been found in the Linux kernel open file descriptors control mechanism, fcntl. This could allow a local unprivileged user to simultaneously...

Scientific Linux Security Update : dbus on SL5.x i386/x86_64

It was discovered that the last dbus security update did not correctly fix the denial of service flaw in the system for sending messages between applications. A local user could use this flaw to send a message with a malformed signature to the bus, causing the bus and, consequently, any process...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - It was found that the receive hook in the ipipinit function in the ipip module, and in the ipgreinit function in the ipgre module, could be called before netwo...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120306)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - A buffer overflow flaw was found in the way the Linux kernel's XFS file system implementation handled links with overly long path names. A local, unprivileged...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

This update fixes the following security issues : - Information leak flaws were found in the Linux kernel Traffic Control Unit implementation. A local attacker could use these flaws to cause the kernel to leak kernel memory to user-space, possibly leading to the disclosure of sensitive informatio...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64

Security fixes : - An integer overflow flaw in ibuverbspollcq could allow a local, unprivileged user to cause a denial of service or escalate their privileges. CVE-2010-4649, Important - An integer signedness flaw in drmmodesetctl could allow a local, unprivileged user to cause a denial of servic...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20120529)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue : - It was found that the datalen parameter of the sockallocsendpskb function in the Linux kernel's networking implementation was not validated before use. A local...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issues : - A flaw was found in the Linux kernel's garbage collector for AFUNIX sockets. A local, unprivileged user could use this flaw to trigger a denial of service out-of-memory condition. CVE-2010-4249, Moderate - A flaw was found in the Linux kernel's...

Scientific Linux Security Update : libtasn1 on SL6.x i386/x86_64 (20120327)

libtasn1 is a library developed for ASN.1 Abstract Syntax Notation One structures management that includes DER Distinguished Encoding Rules encoding and decoding. A flaw was found in the way libtasn1 decoded DER data. An attacker could create carefully-crafted DER encoded input such as an X.509...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120710)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - A NULL pointer dereference flaw was found in the nfctfrag6reasm function in the Linux kernel's netfilter IPv6 connection tracking implementation. A remote...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

This update fixes the following security issues : - A heap overflow flaw was found in the Linux kernel's Transparent Inter-Process Communication protocol TIPC implementation. A local, unprivileged user could use this flaw to escalate their privileges. CVE-2010-3859, Important - Missing sanity...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update fixes the following security issues : - multiple flaws were found in the mmap and mremap implementations. A local user could use these flaws to cause a local denial of service or escalate their privileges. CVE-2010-0291, Important - a NULL pointer dereference flaw was found in the Fas...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

This update fixes the following security issues : - A buffer overflow flaw was found in the loadmixervolumes function in the Linux kernel's Open Sound System OSS sound driver. On 64-bit PowerPC systems, a local, unprivileged user could use this flaw to cause a denial of service or escalate their...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

CVE-2009-3547 kernel: fs: pipe.c NULL pointer dereference This update fixes the following security issues : - a NULL pointer dereference flaw was found in each of the following functions in the Linux kernel: pipereadopen, pipewriteopen, and piperdwropen. When the mutex lock is not held, the ipipe...

Scientific Linux Security Update : openssl on SL5.x, SL6.x i386/x86_64 (20120424)

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a full-strength, general purpose cryptography library. Multiple numeric conversion errors, leading to a buffer overflow, were found in the way OpenSSL parsed ASN.1...