Scientific Linux Security Update : sos on SL6.x (noarch) (20160209)

An insecure temporary file use flaw was found in the way sos created certain sosreport files. A local attacker could possibly use this flaw to perform a symbolic link attack to reveal the contents of sosreport files, or in some cases modify arbitrary files and escalate their privileges on the...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20160128)

An out-of-bounds read/write flaw was discovered in the way QEMU's Firmware Configuration device emulation processed certain firmware configurations. A privileged CAPSYSRAWIO guest user could use this flaw to crash the QEMU process instance or, potentially, execute arbitrary code on the host with...

Scientific Linux Security Update : bind97 on SL5.x i386/x86_64 (20160127)

A denial of service flaw was found in the way BIND processed certain malformed Address Prefix List APL records. A remote, authenticated attacker could use this flaw to cause named to crash. CVE-2015-8704 After installing the update, the BIND daemon named will be restarted automatically...

Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64 (20160127)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2016-1930, CVE-2016-1935 After installing the update, Firefox must...

Scientific Linux Security Update : bind on SL5.x, SL6.x, SL7.x i386/x86_64 (20160127)

A denial of service flaw was found in the way BIND processed certain malformed Address Prefix List APL records. A remote, authenticated attacker could use this flaw to cause named to crash. CVE-2015-8704 After installing the update, the BIND daemon named will be restarted automatically...

Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x, SL6.x, SL7.x i386/x86_64 (20160126)

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code. An untrusted Java application or applet could use this flaw to bypass Java sandbox...

Scientific Linux Security Update : ntp on SL6.x, SL7.x i386/x86_64 (20160125)

It was discovered that ntpd as a client did not correctly check the originate timestamp in received packets. A remote attacker could use this flaw to send a crafted packet to an ntpd client that would effectively disable synchronization with the server, or push arbitrary offset/delay measurements...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20160125)

A use-after-free flaw was found in the way the Linux kernel's key management subsystem handled keyring object reference counting in certain error path of the joinsessionkeyring function. A local, unprivileged user could use this flaw to escalate their privileges on the system. CVE-2016-0728,...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20160119)

Two flaws were found in the way the Linux kernel's networking implementation handled UDP packets with incorrect checksum values. A remote attacker could potentially use these flaws to trigger an infinite loop in the kernel, resulting in a denial of service on the system, or cause a denial of...

Scientific Linux Security Update : openssh on SL7.x x86_64 (20160114)

An information leak flaw was found in the way the OpenSSH client roaming feature was implemented. A malicious server could potentially use this flaw to leak portions of memory possibly including private SSH keys of a successfully authenticated OpenSSH client. CVE-2016-0777 A buffer overflow flaw...

Scientific Linux Security Update : openssl on SL6.x, SL7.x i386/x86_64 (20160107) (SLOTH)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to...

Scientific Linux Security Update : samba4 on SL6.x i386/x86_64 (20160107)

A denial of service flaw was found in the LDAP server provided by the AD DC in the Samba process daemon. A remote attacker could exploit this flaw by sending a specially crafted packet, which could cause the server to consume an excessive amount of memory and crash. CVE-2015-7540 Multiple buffer...

Scientific Linux Security Update : gnutls on SL6.x, SL7.x i386/x86_64 (20160107) (SLOTH)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to...

Scientific Linux Security Update : nss on SL6.x, SL7.x i386/x86_64 (20160107) (SLOTH)

A flaw was found in the way TLS 1.2 could use the MD5 hash function for signing ServerKeyExchange and Client Authentication packets during a TLS handshake. A man-in-the-middle attacker able to force a TLS connection to use the MD5 hash function could use this flaw to conduct collision attacks to...

Scientific Linux Security Update : samba on SL7.x x86_64 (20160107)

A denial of service flaw was found in the LDAP server provided by the AD DC in the Samba process daemon. A remote attacker could exploit this flaw by sending a specially crafted packet, which could cause the server to consume an excessive amount of memory and crash. CVE-2015-7540 Multiple buffer...

Scientific Linux Security Update : samba on SL6.x i386/x86_64 (20160107)

A man-in-the-middle vulnerability was found in the way 'connection signing' was implemented by Samba. A remote attacker could use this flaw to downgrade an existing Samba client connection and force the use of plain text. CVE-2015-5296 A missing access control flaw was found in Samba. A remote,...

Scientific Linux Security Update : rpcbind on SL6.x, SL7.x i386/x86_64 (20160107)

A use-after-free flaw related to the PMAPCALLIT operation and TCP/UDP connections was discovered in rpcbind. A remote attacker could possibly exploit this flaw to crash the rpcbind service by performing a series of UDP and TCP calls. CVE-2015-7236 If the rpcbind service is running, it will be...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x, SL7.x i386/x86_64 (20160105)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2015-7201, CVE-2015-7205, CVE-2015-7212, CVE-2015-7213 A...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20151222)

A heap-based buffer overflow flaw was discovered in the way QEMU's AMD PC- Net II Ethernet Controller emulation received certain packets in loopback mode. A privileged user with the CAPSYSRAWIO capability inside a guest could use this flaw to crash the host QEMU process resulting in denial of...

Scientific Linux Security Update : glibc on SL7.x x86_64_important (20151119)

It was discovered that the nssfiles backend for the Name Service Switch in glibc would return incorrect data to applications or corrupt the heap depending on adjacent heap contents in certain cases. A local attacker could potentially use this flaw to escalate their privileges. CVE-2015-5277...