Scientific Linux Security Update : microcode_ctl on SL7.x x86_64 (2021:2305)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2305-1 advisory. - hw: vt-d related privilege escalation CVE-2020-24489 - hw: improper isolation of shared resources in some Intel Processors CVE-2020-24511 - hw:...

Scientific Linux Security Update : postgresql on SL7.x i686/x86_64 (2021:2397)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2397-1 advisory. - postgresql: Buffer overrun from integer overflow in array subscripting calculations CVE-2021-32027 Note that Nessus has not tested for this issue but ha...

Scientific Linux Security Update : qt5-qtimageformats on SL7.x i686/x86_64 (2021:2328)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2328-1 advisory. - libwebp: heap-based buffer overflow in PutLE16 CVE-2018-25011 - libwebp: use of uninitialized value in ReadSymbol CVE-2018-25014 - libwebp:...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (2021:2322)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2322-1 advisory. - QEMU: ide: atapi: OOB access while processing read commands CVE-2020-29443 Note that Nessus has not tested for this issue but has instead relied only on...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2021:2323)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2323-1 advisory. - 389-ds-base: information disclosure during the binding of a DN CVE-2020-35518 Note that Nessus has not tested for this issue but has instead relied only...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:2263)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2263-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 CVE-2021-29967 - Mozilla: Thunderbird stored OpenPGP secret keys without...

Scientific Linux Security Update : hivex on SL7.x i686/x86_64 (2021:2318)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2318-1 advisory. - hivex: Buffer overflow when provided invalid node key length CVE-2021-3504 Note that Nessus has not tested for this issue but has instead relied only on...

Scientific Linux Security Update : libwebp on SL7.x i686/x86_64 (2021:2260)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2260-1 advisory. - libwebp: heap-based buffer overflow in PutLE16 CVE-2018-25011 - libwebp: heap-based buffer overflow in WebPDecodeInto functions CVE-2020-36328 ...

Scientific Linux Security Update : samba on SL7.x i686/x86_64 (2021:2313)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2313-1 advisory. - samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token CVE-2021-20254 Note that Nessus has not...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2021:2206)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2206-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11 CVE-2021-29967 Note that Nessus has not tested for this issue but has instead reli...

Scientific Linux Security Update : glib2 on SL7.x i686/x86_64 (2021:2147)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:2147-1 advisory. - glib: integer overflow in gbytesnew function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits CVE-2021-27219 Note that Nessus has not...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2021:0656)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0656-1 advisory. - Mozilla: Content Security Policy violation report could have contained the destination of a redirect CVE-2021-23968, CVE-2021-23969 - Mozilla:...

Scientific Linux Security Update : xterm on SL7.x x86_64 (2021:0617)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0617-1 advisory. - xterm: crash when processing combining characters CVE-2021-27135 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:0661)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0661-1 advisory. - Mozilla: Content Security Policy violation report could have contained the destination of a redirect CVE-2021-23968, CVE-2021-23969 - Mozilla:...

Scientific Linux Security Update : wpa_supplicant on SL7.x x86_64 (2021:0808)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0808-1 advisory. - wpasupplicant: Use-after-free in P2P provision discovery processing CVE-2021-27803 Note that Nessus has not tested for this issue but has instead relied...

Scientific Linux Security Update : screen on SL7.x x86_64 (2021:0742)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0742-1 advisory. - screen: crash when processing combining chars CVE-2021-26937 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : grub2 on SL7.x x86_64 (2021:0699)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0699-1 advisory. - grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled CVE-2020-14372 - grub2: Use-after-free in...

Scientific Linux Security Update : bind on SL7.x i686/x86_64 (2021:0671)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0671-1 advisory. - bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation CVE-2020-8625 Note that Nessus has not tested for this...

Scientific Linux Security Update : flatpak on SL7.x x86_64 (2021:0411)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0411-1 advisory. - flatpak: sandbox escape via spawn portal CVE-2021-21261 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2021:0336)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0336-1 advisory. - kernel: use-after-free in fs/blockdev.c CVE-2020-15436 - kernel: Nfsd failure to clear umask after processing an open or create CVE-2020-35513...