Scientific Linux Security Update : subversion on SL7.x x86_64 (20150908)

An assertion failure flaw was found in the way the SVN server processed certain requests with dynamically evaluated revision numbers. A remote attacker could use this flaw to cause the SVN server both svnserve and httpd with the moddavsvn module to crash. CVE-2015-0248 It was found that the...

Scientific Linux Security Update : haproxy on SL6.x, SL7.x i386/x86_64 (20150908)

An implementation error related to the memory management of request and responses was found within HAProxy's bufferslowrealign function. An unauthenticated remote attacker could possibly use this flaw to leak certain memory buffer contents from a past request or session. CVE-2015-3281 %NASLMINLEV...

Scientific Linux Security Update : spice-server on SL7.x x86_64 (20150903)

A race condition flaw, leading to a heap-based memory corruption, was found in spice's workerupdatemonitorsconfig function, which runs under the QEMU-KVM context on the host. A user in a guest could leverage this flaw to crash the host QEMU-KVM process or, possibly, execute arbitrary code with th...

Scientific Linux Security Update : bind on SL6.x, SL7.x i386/x86_64 (20150903)

A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query for example, a query requiring a response from a zone containing a deliberately malformed key that would cause named functioning as ...

Scientific Linux Security Update : libXfont on SL6.x, SL7.x i386/x86_64 (20150903)

An integer overflow flaw was found in the way libXfont processed certain Glyph Bitmap Distribution Format BDF fonts. A malicious, local user could use this flaw to crash the X.Org server or, potentially, execute arbitrary code with the privileges of the X.Org server. CVE-2015-1802 An integer...

Scientific Linux Security Update : bind97 on SL5.x i386/x86_64 (20150903)

A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query for example, a query requiring a response from a zone containing a deliberately malformed key that would cause named functioning as ...

Scientific Linux Security Update : bind on SL5.x i386/x86_64 (20150903)

A denial of service flaw was found in the way BIND parsed certain malformed DNSSEC keys. A remote attacker could use this flaw to send a specially crafted DNS query for example, a query requiring a response from a zone containing a deliberately malformed key that would cause named functioning as ...

Scientific Linux Security Update : spice-server on SL6.x x86_64 (20150903)

A race condition flaw, leading to a heap-based memory corruption, was found in spice's workerupdatemonitorsconfig function, which runs under the QEMU-KVM context on the host. A user in a guest could leverage this flaw to crash the host QEMU-KVM process or, possibly, execute arbitrary code with th...

Scientific Linux Security Update : pcs on SL6.x, SL7.x i386/x86_64 (20150901)

A command injection flaw was found in the pcsd web UI. An attacker able to trick a victim that was logged in to the pcsd web UI into visiting a specially crafted URL could use this flaw to execute arbitrary code with root privileges on the server hosting the web UI. CVE-2015-5190 A race condition...

Scientific Linux Security Update : nss-softokn on SL6.x, SL7.x i386/x86_64 (20150901)

A flaw was found in the way NSS verified certain ECDSA Elliptic Curve Digital Signature Algorithm signatures. Under certain conditions, an attacker could use this flaw to conduct signature forgery attacks. CVE-2015-2730 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is ...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x, SL7.x i386/x86_64 (20150825)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2015-4473, CVE-2015-4491, CVE-2015-4487, CVE-2015-4488,...

Scientific Linux Security Update : nss on SL5.x i386/x86_64 (20150824)

It was found that NSS permitted skipping of the ServerKeyExchange packet during a handshake involving ECDHE Elliptic Curve Diffie-Hellman key Exchange. A remote attacker could use this flaw to bypass the forward- secrecy of a TLS/SSL connection. CVE-2015-2721 A flaw was found in the way NSS...

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20150824) (BACKRONYM)

It was found that the MySQL client library permitted but did not require a client to use SSL/TLS when establishing a secure connection to a MySQL server using the '--ssl' option. A man-in-the-middle attacker could use this flaw to strip the SSL/TLS protection from a connection between a client an...

Scientific Linux Security Update : httpd on SL7.x x86_64 (20150824)

Multiple flaws were found in the way httpd parsed HTTP requests and responses using chunked transfer encoding. A remote attacker could use these flaws to create a specially crafted request, which httpd would decode differently from an HTTP proxy software in front of it, possibly leading to HTTP...

Scientific Linux Security Update : httpd on SL6.x i386/x86_64 (20150824)

Multiple flaws were found in the way httpd parsed HTTP requests and responses using chunked transfer encoding. A remote attacker could use these flaws to create a specially crafted request, which httpd would decode differently from an HTTP proxy software in front of it, possibly leading to HTTP...

Scientific Linux Security Update : pam on SL6.x, SL7.x i386/x86_64 (20150818)

It was discovered that the unixrunhelperbinary function of PAM's unixpam module could write to a blocking pipe, possibly causing the function to become unresponsive. An attacker able to supply large passwords to the unixpam module could use this flaw to enumerate valid user accounts, or cause a...

Scientific Linux Security Update : glibc on SL5.x i386/x86_64 (20150817)

An invalid free flaw was found in glibc's getaddrinfo function when used with the AIIDN flag. A remote attacker able to make an application call this function could use this flaw to execute arbitrary code with the permissions of the user running the application. Note that this flaw only affected...

Scientific Linux Security Update : net-snmp on SL6.x, SL7.x i386/x86_64 (20150817)

It was discovered that the snmppduparse function could leave incompletely parsed varBind variables in the list of variables. A remote, unauthenticated attacker could use this flaw to crash snmpd or, potentially, execute arbitrary code on the system with the privileges of the user running snmpd...

Scientific Linux Security Update : mysql55-mysql on SL5.x i386/x86_64 (20150817)

This update fixes several vulnerabilities in the MySQL database server. CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573,...

Scientific Linux Security Update : sqlite on SL7.x x86_64 (20150817)

A flaw was found in the way SQLite handled dequoting of collation-sequence names. A local attacker could submit a specially crafted COLLATE statement that would crash the SQLite process, or have other unspecified impacts. CVE-2015-3414 It was found that SQLite's sqlite3VdbeExec function did not...