Scientific Linux Security Update : icedtea-web on SL6.x i386/x86_64 (20130417)

It was discovered that the IcedTea-Web plug-in incorrectly used the same class loader instance for applets with the same value of the codebase attribute, even when they originated from different domains. A malicious applet could use this flaw to gain information about and possibly manipulate...

Scientific Linux Security Update : krb5 on SL6.x i386/x86_64 (20130416)

A NULL pointer dereference flaw was found in the way the MIT Kerberos KDC processed certain TGS Ticket-granting Server requests. A remote, authenticated attacker could use this flaw to crash the KDC via a specially crafted TGS request. CVE-2013-1416 After installing the updated packages, the...

Scientific Linux Security Update : subversion on SL5.x, SL6.x i386/x86_64 (20130411)

A NULL pointer dereference flaw was found in the way the moddavsvn module handled PROPFIND requests on activity URLs. A remote attacker could use this flaw to cause the httpd process serving the request to crash. CVE-2013-1849 A flaw was found in the way the moddavsvn module handled large numbers...

Scientific Linux Security Update : kvm on SL5.x x86_64 (20130409)

A flaw was found in the way KVM handled guest time updates when the buffer the guest registered by writing to the MSRKVMSYSTEMTIME machine state register MSR crossed a page boundary. A privileged guest user could use this flaw to crash the host or, potentially, escalate their privileges, allowing...

Scientific Linux Security Update : stunnel on SL6.x i386/x86_64 (20130408)

An integer conversion issue was found in stunnel when using Microsoft NT LAN Manager NTLM authentication with the HTTP CONNECT tunneling method. With this configuration, and using stunnel in SSL client mode on a 64-bit system, an attacker could possibly execute arbitrary code with the privileges ...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20130402)

Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. CVE-2013-0788 A flaw was found in the way Same Origin Wrappers were implemented in...

Scientific Linux Security Update : firefox on SL5.x, SL6.x i386/x86_64 (20130402)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2013-0788 A flaw was found in the way Same Origin Wrappers were...

Scientific Linux Security Update : bind97 on SL5.x i386/x86_64 (20130328)

A denial of service flaw was found in the libdns library. A remote attacker could use this flaw to send a specially crafted DNS query to named that, when processed, would cause named to use an excessive amount of memory, or possibly crash. CVE-2013-2266 Note: This update disables the syntax...

Scientific Linux Security Update : bind on SL6.x i386/x86_64 (20130328)

A denial of service flaw was found in the libdns library. A remote attacker could use this flaw to send a specially crafted DNS query to named that, when processed, would cause named to use an excessive amount of memory, or possibly crash. CVE-2013-2266 Note: This update disables the syntax...

Scientific Linux Security Update : pixman on SL6.x i386/x86_64 (20130327)

An integer overflow flaw was discovered in one of pixman's manipulation routines. If a remote attacker could trick an application using pixman into performing a certain manipulation, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user runni...

Scientific Linux Security Update : axis on SL5.x i386/x86_64 (20130325)

Apache Axis did not verify that the server hostname matched the domain name in the subject's Common Name CN or subjectAltName field in X.509 certificates. This could allow a man-in-the-middle attacker to spoof an SSL server if they had a certificate that was valid for any domain name. CVE-2012-57...

Scientific Linux Security Update : boost on SL5.x, SL6.x i386/x86_64 (20130321)

A flaw was found in the way the orderedmalloc routine in Boost sanitized the 'nextsize' and 'maxsize' parameters when allocating memory. If an application used the Boost C++ libraries for memory allocation, and performed memory allocation based on user-supplied input, an attacker could use this...

Scientific Linux Security Update : qt on SL6.x i386/x86_64 (20130321)

It was discovered that the QSharedMemory class implementation of the Qt toolkit created shared memory segments with insecure permissions. A local attacker could use this flaw to read or alter the contents of a particular shared memory segment, possibly leading to their ability to obtain sensitive...

Scientific Linux Security Update : sssd on SL6.x i386/x86_64 (20130319)

When SSSD was configured as a Microsoft Active Directory client by using the new Active Directory provider introduced in SLSA-2013:0508, the Simple Access Provider 'accessprovider = simple' in '/etc/sssd/sssd.conf' did not handle access control correctly. If any groups were specified with the...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20130312)

This update fixes the following security issues : - A flaw was found in the way the xeniret function in the Linux kernel used the DS the CPU's Data Segment register. A local, unprivileged user in a 32-bit, para-virtualized Xen hypervisor guest could use this flaw to crash the guest or, potentiall...

Scientific Linux Security Update : pidgin on SL5.x, SL6.x i386/x86_64 (20130314)

A stack-based buffer overflow flaw was found in the Pidgin MXit protocol plug-in. A malicious server or a remote attacker could use this flaw to crash Pidgin by sending a specially crafted HTTP request. CVE-2013-0272 A buffer overflow flaw was found in the Pidgin Sametime protocol plug-in. A...

Scientific Linux Security Update : Core X11 clients on SL6.x i386/x86_64 (20130221)

It was found that the x11perfcomp utility included the current working directory in its PATH environment variable. Running x11perfcomp in an attacker- controlled directory would cause arbitrary code execution with the privileges of the user running x11perfcomp. CVE-2011-2504 Also with this update...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20130311)

This update fixes the following security issues : - A flaw was found in the way file permission checks for the '/dev/cpu/x/msr' files were performed in restricted root environments for example, when using a capability-based security model. A local user with the ability to write to these files cou...

Scientific Linux Security Update : tzdata enhancement update on SL5.x, SL6.x i386/x86_64 (20130308)

This update adds the following enhancements : The Chilean Government is extending the period of Daylight Saving Time DST in the year 2013 until April the 27th. Then, Chile Standard Time CLT and Easter Island Standard Time EAST will be in effect until September the 7th when switching again to DST...

Scientific Linux Security Update : tomcat5 on SL5.x i386/x86_64 (20130312)

It was found that when an application used FORM authentication, along with another component that calls request.setUserPrincipal before the call to FormAuthenticatorauthenticate such as the Single-Sign-On valve, it was possible to bypass the security constraint checks in the FORM authenticator by...