Scientific Linux Security Update : xorg-x11-server on SL7.x i686/x86_64 (2022:0003)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:0003-1 advisory. - xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access CVE-2021-4008 - xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds...

Scientific Linux Security Update : samba on SL7.x i686/x86_64 (2021:5192)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:5192-1 advisory. - samba: Active Directory AD domain user could become root on domain members CVE-2020-25717 - samba: SMB1 client connections can be downgraded to...

Scientific Linux Security Update : ipa on SL7.x x86_64 (2021:5195)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:5195-1 advisory. - samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets CVE-2020-25719 Note that Nessus has not tested for this issue but has...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:5046)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:5046-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4 Mozilla: URL leakage when navigating while executing asynchronous function...

Scientific Linux Security Update : mailman on SL7.x x86_64 (2021:4913)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:4913-1 advisory. - mailman: CSRF token bypass allows to perform CSRF attacks and account takeover CVE-2021-42097 - mailman: CSRF token bypass allows to perform CS...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2021:5014)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:5014-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4 Mozilla: URL leakage when navigating while executing asynchronous function...

Scientific Linux Security Update : nss on SL7.x i686/x86_64 (2021:4904)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:4904-1 advisory. - nss: Memory corruption in decodeECorDsaSignature with DSA signatures and RSA-PSS CVE-2021-43527 Note that Nessus has not tested for this issue but has...

Scientific Linux Security Update : binutils on SL7.x i686/x86_64 (2021:4033)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:4033-1 advisory. - Developer environment: Unicode's bidirectional BiDi override characters can cause trojan source attacks CVE-2021-42574 Note that Nessus has not tested f...

Scientific Linux Security Update : flatpak on SL7.x x86_64 (2021:4044)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:4044-1 advisory. - flatpak: Sandbox bypass via recent VFS-manipulating syscalls CVE-2021-41133 Note that Nessus has not tested for this issue but has instead relied only o...

Scientific Linux Security Update : xstream on SL7.x (noarch) (2021:3956)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3956-1 advisory. - xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl CVE-2021-39139, CVE-2021-39153 - xstream:...

Scientific Linux Security Update : java-11-openjdk on SL7.x i686/x86_64 (2021:3892)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3892-1 advisory. - OpenJDK: Loop in HttpsServer triggered during TLS session close JSSE, 8254967 CVE-2021-35565 - OpenJDK: Incorrect principal selection when usin...

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x i686/x86_64 (2021:3889)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3889-1 advisory. - OpenJDK: Loop in HttpsServer triggered during TLS session close JSSE, 8254967 CVE-2021-35565 - OpenJDK: Incorrect principal selection when usin...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:3841)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3841-1 advisory. - Mozilla: Use-after-free in MessageTask CVE-2021-38496 - Mozilla: Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91....

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2021:3791)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3791-1 advisory. - Mozilla: Use-after-free in MessageTask CVE-2021-38496 - Mozilla: Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91....

Scientific Linux Security Update : libxml2 on SL7.x i686/x86_64 (2021:3810)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3810-1 advisory. - libxml2: Use after free via namespace node in XPointer ranges CVE-2016-4658 Note that Nessus has not tested for this issue but has instead relied only o...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2021:3801)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:3801-1 advisory. - kernel: Improper handling of VMIO|VMPFNMAP vmas in KVM can bypass RO checks CVE-2021-22543 - kernel: powerpc: KVM guest OS users can cause host...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2021:3807)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3807-1 advisory. - 389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed CVE-2021-3652 Note that Nessus has not tested for this issue but has...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:3494)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3494-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 CVE-2021-38493 Note that Nessus has not tested for this issue bu...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2021:3498)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3498-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 92, Firefox ESR 78.14 and Firefox ESR 91.1 CVE-2021-38493 Note that Nessus has not tested for this issue bu...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2021:3438)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3438-1 advisory. - kernel: use-after-free in route4change in net/sched/clsroute.c CVE-2021-3715 Note that Nessus has not tested for this issue but has instead relied only ...