Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20130828)

It was discovered that the 389 Directory Server did not properly handle the receipt of certain MOD operations with a bogus Distinguished Name DN. A remote, unauthenticated attacker could use this flaw to cause the 389 Directory Server to crash. CVE-2013-4283 After installing this update, the 389...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20130820)

This update fixes the following security issues : - A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled duplicate cookies. If a local user queried SCTP connection information at the same time a remote attacker has initialized a crafted...

Scientific Linux Security Update : httpd on SL5.x, SL6.x i386/x86_64 (20130813)

A flaw was found in the way the moddav module of the Apache HTTP Server handled merge requests. An attacker could use this flaw to send a crafted merge request that contains URIs that are not configured for DAV, causing the httpd child process to crash. CVE-2013-1896 After installing the updated...

Scientific Linux Security Update : nss, nss-util, nss-softokn, and nspr on SL6.x i386/x86_64 (20130807)

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20130807)

Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2013-1701 A flaw was found in the way Thunderbird generated Certificate Request...

Scientific Linux Security Update : nss and nspr on SL5.x i386/x86_64 (20130805)

It was discovered that NSS leaked timing information when decrypting TLS/SSL and DTLS protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL or DTLS server as a padding...

Scientific Linux Security Update : bind97 on SL5.x i386/x86_64 (20130730)

A denial of service flaw was found in BIND. A remote attacker could use this flaw to send a specially crafted DNS query to named that, when processed, would cause named to crash when rejecting the malformed query. CVE-2013-4854 After installing the update, the BIND daemon named will be restarted...

Scientific Linux Security Update : sos on SL5.x (noarch) (20130730)

The sosreport utility collected the Kickstart configuration file '/root /anaconda-ks.cfg', but did not remove the root user's password from it before adding the file to the resulting archive of debugging information. An attacker able to access the archive could possibly use this flaw to obtain th...

Scientific Linux Security Update : bind on SL6.x i386/x86_64 (20130730)

A denial of service flaw was found in BIND. A remote attacker could use this flaw to send a specially crafted DNS query to named that, when processed, would cause named to crash when rejecting the malformed query. CVE-2013-4854 After installing the update, the BIND daemon named will be restarted...

Scientific Linux Security Update : haproxy on SL6.x i386/x86_64 (20130730)

A flaw was found in the way HAProxy handled requests when the proxy's configuration '/etc/haproxy/haproxy.cfg' had certain rules that use the hdrip criterion. A remote attacker could use this flaw to crash HAProxy instances that use the affected configuration. CVE-2013-2175 %NASLMINLEVEL 70300 C...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/srpm/x86_64 (20130722)

An unquoted search path flaw was found in the way the QEMU Guest Agent service installation was performed on Windows. Depending on the permissions of the directories in the unquoted search path, a local, unprivileged user could use this flaw to have a binary of their choosing executed with SYSTEM...

Scientific Linux Security Update : ruby on SL5.x, SL6.x i386/srpm/x86_64 (20130717)

A flaw was found in Ruby's SSL client's hostname identity check when handling certificates that contain hostnames with NULL bytes. An attacker could potentially exploit this flaw to conduct man-in-the-middle attacks to spoof SSL servers. Note that to exploit this issue, an attacker would need to...

Scientific Linux Security Update : php on SL5.x, SL6.x i386/x86_64 (20130712)

A buffer overflow flaw was found in the way PHP parsed deeply nested XML documents. If a PHP application used the xmlparseintostruct function to parse untrusted XML content, an attacker able to supply specially- crafted XML could use this flaw to crash the application or, possibly, execute...

Scientific Linux Security Update : php53 on SL5.x i386/x86_64 (20130712)

A buffer overflow flaw was found in the way PHP parsed deeply nested XML documents. If a PHP application used the xmlparseintostruct function to parse untrusted XML content, an attacker able to supply specially- crafted XML could use this flaw to crash the application or, possibly, execute...

Scientific Linux Security Update : tzdata enhancement update on SL5.x, SL6.x i386/x86_64 (20130709)

This update adds the following enhancements : Morocco does not observe DST during Ramadan. Therefore, Morocco is expected to switch to Western European Time WET on July 7 and resume again to Western European Summer Time WEST on August 10. Also, the period of DST in Israel has been extended until...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20130625)

Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2013-1682, CVE-2013-1684, CVE-2013-1685, CVE-2013-1686, CVE-2013-1687, CVE-2013-1690...

Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20130625)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2013-1682, CVE-2013-1684, CVE-2013-1685, CVE-2013-1686,...

Scientific Linux Security Update : curl on SL5.x, SL6.x i386/srpm/x86_64 (20130625)

A heap-based buffer overflow flaw was found in the way libcurl unescaped URLs. A remote attacker could provide a specially crafted URL that, when processed by an application using libcurl that handles untrusted URLs, would possibly cause it to crash or, potentially, execute arbitrary code...

Scientific Linux Security Update : tomcat6 on SL6.x (noarch) (20130620)

A session fixation flaw was found in the Tomcat FormAuthenticator module. During a narrow window of time, if a remote attacker sent requests while a user was logging in, it could possibly result in the attacker's requests being processed as if they were sent by the user. CVE-2013-2067 Tomcat must...

Scientific Linux Security Update : krb5 on SL5.x, SL6.x i386/x86_64 (20130612)

It was found that kadmind's kpasswd service did not perform any validation on incoming network packets, causing it to reply to all requests. A remote attacker could use this flaw to send spoofed packets to a kpasswd service that appear to come from kadmind on a different server, causing the...