Scientific Linux Security Update : tomcat6 on SL6.x (noarch) (20130311)

It was found that when an application used FORM authentication, along with another component that calls request.setUserPrincipal before the call to FormAuthenticatorauthenticate such as the Single-Sign-On valve, it was possible to bypass the security constraint checks in the FORM authenticator by...

Scientific Linux Security Update : tomcat5 on SL5.x i386/x86_64 (20130312)

It was found that when an application used FORM authentication, along with another component that calls request.setUserPrincipal before the call to FormAuthenticatorauthenticate such as the Single-Sign-On valve, it was possible to bypass the security constraint checks in the FORM authenticator by...

Scientific Linux Security Update : xulrunner on SL5.x, SL6.x i386/x86_64 (20130308)

A flaw was found in the way XULRunner handled malformed web content. A web page containing malicious content could cause an application linked against XULRunner such as Mozilla Firefox to crash or execute arbitrary code with the privileges of the user running the application. CVE-2013-0787 After...

Scientific Linux Security Update : java-1.7.0-openjdk on SL5.x i386/x86_64 (20130306)

An integer overflow flaw was found in the way the 2D component handled certain sample model instances. A specially crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges. CVE-2013-0809 It was...

Scientific Linux Security Update : ruby on SL6.x i386/x86_64 (20130307)

It was discovered that Ruby's REXML library did not properly restrict XML entity expansion. An attacker could use this flaw to cause a denial of service by tricking a Ruby application using REXML to read text nodes from specially crafted XML content, which will result in REXML consuming large...

Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64 (20130306)

An integer overflow flaw was found in the way the 2D component handled certain sample model instances. A specially crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges. CVE-2013-0809 It was...

Scientific Linux Security Update : kvm on SL5.x x86_64 (20130307)

A flaw was found in the way QEMU-KVM emulated the e1000 network interface card when the host was configured to accept jumbo network frames, and a guest using the e1000 emulated driver was not. A remote attacker could use this flaw to crash the guest or, potentially, execute arbitrary code with ro...

Scientific Linux Security Update : java-1.6.0-openjdk on SL6.x i386/x86_64 (20130306)

An integer overflow flaw was found in the way the 2D component handled certain sample model instances. A specially crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges. CVE-2013-0809 It was...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20130307)

A flaw was found in the way QEMU-KVM emulated the e1000 network interface card when the host was configured to accept jumbo network frames, and a guest using the e1000 emulated driver was not. A remote attacker could use this flaw to crash the guest or, potentially, execute arbitrary code with ro...

Scientific Linux Security Update : xen on SL5.x i386/x86_64 (20130306)

A flaw was found in the way QEMU emulated the e1000 network interface card when the host was configured to accept jumbo network frames, and a fully- virtualized guest using the e1000 emulated driver was not. A remote attacker could use this flaw to crash the guest or, potentially, execute arbitra...

Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x i386/x86_64 (20130306)

An integer overflow flaw was found in the way the 2D component handled certain sample model instances. A specially crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges. CVE-2013-0809 It was...

Scientific Linux Security Update : pcre on SL4.x, SL3.x i386/x86_64

Flaws were discovered in the way PCRE handles certain malformed regular expressions. If an application linked against PCRE, such as Konqueror, parsed a malicious regular expression, it may have been possible to run arbitrary code as the user running the application. CVE-2006-7225, CVE-2006-7226,...

Scientific Linux Security Update : gnutls on SL5.x, SL6.x i386/x86_64 (20130304)

It was discovered that GnuTLS leaked timing information when decrypting TLS/SSL protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL server as a padding oracle...

Scientific Linux Security Update : hplip on SL6.x i386/x86_64 (20130221)

Several temporary file handling flaws were found in HPLIP. A local attacker could use these flaws to perform a symbolic link attack, overwriting arbitrary files accessible to a process using HPLIP. CVE-2013-0200, CVE-2011-2722 The hplip packages have been upgraded to upstream version 3.12.4, whic...

Scientific Linux Security Update : ipa on SL6.x i386/x86_64 (20130221)

It was found that the current default configuration of IPA servers did not publish correct CRLs Certificate Revocation Lists. The default configuration specifies that every replica is to generate its own CRL; however, this can result in inconsistencies in the CRL contents provided to clients from...

Scientific Linux Security Update : openchange on SL6.x i386/x86_64 (20130221)

A flaw was found in the Samba suite's Perl-based DCE/RPC IDL PIDL compiler. As OpenChange uses code generated by PIDL, this could have resulted in buffer overflows in the way OpenChange handles RPC calls. With this update, the code has been generated with an updated version of PIDL to correct thi...

Scientific Linux Security Update : git on SL6.x i386/x86_64 (20130304)

It was discovered that Git's git-imap-send command, a tool to send a collection of patches from standard input stdin to an IMAP folder, did not properly perform SSL X.509 v3 certificate validation on the IMAP server's certificate, as it did not ensure that the server's hostname matched the one...

Scientific Linux Security Update : rdma on SL6.x i386/x86_64 (20130221)

A denial of service flaw was found in the way ibacm managed reference counts for multicast connections. An attacker could send specially crafted multicast packets that would cause the ibacm daemon to crash. CVE-2012-4517 It was found that the ibacm daemon created some files with world-writable...

Scientific Linux Security Update : util-linux-ng on SL6.x i386/x86_64 (20130221)

An information disclosure flaw was found in the way the mount command reported errors. A local attacker could use this flaw to determine the existence of files and directories they do not have access to. CVE-2013-0157 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : ccid on SL6.x i386/x86_64 (20130221)

An integer overflow, leading to an array index error, was found in the way the CCID driver processed a smart card's serial number. A local attacker could use this flaw to execute arbitrary code with the privileges of the user running the PC/SC Lite pcscd daemon root, by default, by inserting a...