Scientific Linux Security Update : poppler on SL7.x x86_64 (20161103)

Security Fixes : - A heap-buffer overflow was found in the poppler library. An attacker could create a malicious PDF file that would cause applications that use poppler such as Evince to crash or, potentially, execute arbitrary code when opened. CVE-2015-8868 Additional Changes : %NASLMINLEVEL...

Scientific Linux Security Update : sudo on SL6.x, SL7.x i386/x86_64 (20161206)

Security Fixes : - It was discovered that the sudo noexec restriction could have been bypassed if application run via sudo executed system, popen, or wordexp C library functions with a user-supplied argument. A local user permitted to run such application via sudo with noexec restriction could us...

Scientific Linux Security Update : fontconfig on SL7.x x86_64 (20161103)

Security Fixes : - It was found that cache files were insufficiently validated in fontconfig. A local attacker could create a specially crafted cache file to trigger arbitrary free calls, which in turn could lead to arbitrary code execution. CVE-2016-5384 Additional Changes : %NASLMINLEVEL 70300 ...

Scientific Linux Security Update : NetworkManager on SL7.x x86_64 (20161103)

The following packages have been upgraded to a newer upstream version: NetworkManager 1.4.0, NetworkManager-libreswan 1.2.4, network-manager- applet 1.4.0, libnl3 3.2.28. Security Fixes : - A race condition vulnerability was discovered in NetworkManager. Temporary files were created insecurely wh...

Scientific Linux Security Update : expat on SL6.x, SL7.x i386/x86_64 (20161128)

Security Fixes : - An out-of-bounds read flaw was found in the way Expat processed certain input. A remote attacker could send specially crafted XML that, when parsed by an application using the Expat library, would cause that application to crash or, possibly, execute arbitrary code with the...

Scientific Linux Security Update : curl on SL7.x x86_64 (20161103)

Security Fixes : - It was found that the libcurl library did not prevent TLS session resumption when the client certificate had changed. An attacker could potentially use this flaw to hijack the authentication of the connection by leveraging a previously created connection with a different client...

Scientific Linux Security Update : firewalld on SL7.x (noarch) (20161103)

The following packages have been upgraded to a newer upstream version: firewalld 0.4.3.2. Security Fixes : - A flaw was found in the way firewalld allowed certain firewall configurations to be modified by unauthenticated users. Any locally logged in user could use this flaw to tamper or change...

Scientific Linux Security Update : glibc on SL7.x x86_64 (20161103)

Security Fixes : - A stack overflow vulnerability was found in nssdnsgetnetbynamer. On systems with nsswitch configured to include 'networks: dns' with a privileged or network-facing service that would attempt to resolve user- provided network names, an attacker could provide an excessively long...

Scientific Linux Security Update : krb5 on SL7.x x86_64 (20161103)

The following packages have been upgraded to a newer upstream version: krb5 1.14.1. Security Fixes : - A NULL pointer dereference flaw was found in MIT Kerberos kadmind service. An authenticated attacker with permission to modify a principal entry could use this flaw to cause kadmind to dereferen...

Scientific Linux Security Update : memcached on SL6.x i386/x86_64 (20161123)

Security Fixes : - Two integer overflow flaws, leading to heap-based buffer overflows, were found in the memcached binary protocol. An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code. CVE-2016-8704,...

Scientific Linux Security Update : nss and nss-util on SL5.x, SL6.x, SL7.x i386/x86_64 (20161116)

The nss-util packages provide utilities for use with the Network Security Services NSS libraries. The following packages have been upgraded to a newer upstream version: nss 3.12.3, nss-util 3.12.3. Security Fixes : - Multiple buffer handling flaws were found in the way NSS handled cryptographic...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20161115)

Security Fixes : - It was found that 389 Directory Server was vulnerable to a flaw in which the default ACI Access Control Instructions could be read by an anonymous user. This could lead to leakage of sensitive information. CVE-2016-5416 - An information disclosure flaw was found in 389 Director...

Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20161116)

This update upgrades Firefox to version 45.5.0 ESR. Security Fixes : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Scientific Linux Security Update : policycoreutils on SL6.x, SL7.x i386/x86_64

Security Fixes : - It was found that the sandbox tool provided in policycoreutils was vulnerable to a TIOCSTI ioctl attack. A specially crafted program executed via the sandbox command could use this flaw to execute arbitrary commands in the context of the parent shell, escaping the sandbox...

Scientific Linux Security Update : libgcrypt on SL6.x i386/x86_64 (20161108)

Security Fixes : - A design flaw was found in the libgcrypt PRNG Pseudo-Random Number Generator. An attacker able to obtain the first 580 bytes of the PRNG output could predict the following 20 bytes. CVE-2016-6313 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : pacemaker on SL6.x i386/x86_64 (20161108)

Security Fixes : - An authorization flaw was found in Pacemaker, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gai...

Scientific Linux Security Update : bind on SL5.x, SL6.x i386/x86_64 (20161102)

Security Fixes : - A denial of service flaw was found in the way BIND handled responses containing a DNAME answer. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response. CVE-2016-8864 %NASLMINLEVEL 70300 C Tenable...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20161028) (Dirty COW)

Security Fixes : - A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only memory mappings. An unprivileged, local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase...

Scientific Linux Security Update : Important: kernel on SL6.x i386/x86_64 (20161025) (Dirty COW)

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes : - A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only memory mappings. An unprivileged, local user could use thi...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20161024) (Dirty COW)

Security Fixes : - A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write COW breakage of private read-only memory mappings. An unprivileged, local user could use this flaw to gain write access to otherwise read-only memory mappings and thus increase...