Scientific Linux Security Update : kvm on SL5.x x86_64 (20120905)

KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module built for the standard Red Hat Enterprise Linux kernel. A flaw was found in the way QEMU handled VT100 terminal escape sequences when emulating certain characte...

Scientific Linux Security Update : qemu-kvm on SL6.x x86_64 (20120905)

KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space component for running virtual machines using KVM. A flaw was found in the way QEMU handled VT100 terminal escape sequences when emulating certain character device...

Scientific Linux Security Update : java-1.6.0-openjdk on SL5.x i386/x86_64 (20120903)

These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. It was discovered that the Beans component in OpenJDK did not perform permission checks properly. An untrusted Java application or applet could use this flaw to use classes from restricted...

Scientific Linux Security Update : glibc on SL6.x i386/x86_64 (20120827)

The glibc packages provide the standard C and standard math libraries used by multiple programs on the system. Without these libraries, the Linux system cannot function properly. Multiple integer overflow flaws, leading to stack-based buffer overflows, were found in glibc's functions for converti...

Scientific Linux Security Update : glibc on SL5.x i386/x86_64 (20120827)

The glibc packages provide the standard C and standard math libraries used by multiple programs on the system. Without these libraries, the Linux system cannot function properly. Multiple integer overflow flaws, leading to stack-based buffer overflows, were found in glibc's functions for converti...

Scientific Linux Security Update : python-paste-script on SL6.x i386/x86_64 (20120827)

Python Paste provides middleware for building and running Python web applications. The python-paste-script package includes paster, a tool for working with and running Python Paste applications. It was discovered that paster did not drop supplementary group privileges when started by the root use...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20120821)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue : - A flaw was found in the way the Linux kernel's dl2k driver, used by certain D-Link Gigabit Ethernet adapters, restricted IOCTLs. A local, unprivileged user coul...

Scientific Linux Security Update : tetex on SL5.x i386/x86_64 (20120823)

teTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent DVI file as output. teTeX embeds a copy of t1lib to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code :...

Scientific Linux Security Update : libvirt on SL6.x i386/x86_64 (20120823)

The libvirt library is a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. A flaw was found in libvirtd's RPC call handling. An attacker able to establish ...

Scientific Linux Security Update : gimp on SL6.x i386/x86_64 (20120820)

The GIMP GNU Image Manipulation Program is an image composition and editing program. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's GIF image format plug-in. An attacker could create a specially crafted GIF image file that, when opened, could cause the...

Scientific Linux Security Update : gimp on SL5.x i386/x86_64 (20120820)

The GIMP GNU Image Manipulation Program is an image composition and editing program. Multiple integer overflow flaws, leading to heap-based buffer overflows, were found in the GIMP's Adobe Photoshop PSD image file plug-in. An attacker could create a specially crafted PSD image file that, when...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20120814)

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - An integer overflow flaw was found in the i915gemexecbuffer2 function in the Intel i915 driver in the Linux kernel. A local, unprivileged user could use this...

Scientific Linux Security Update : openldap on SL6.x i386/x86_64 (20120808)

It was found that the OpenLDAP server daemon ignored olcTLSCipherSuite settings. This resulted in the default cipher suite always being used, which could lead to weaker than expected ciphers being accepted during Transport Layer Security TLS negotiation with OpenLDAP clients. CVE-2012-2668 This...

Scientific Linux Security Update : dhcp on SL6.x i386/x86_64 (20120803)

The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. A denial of service flaw was found in the way the dhcpd daemon handled...

Scientific Linux Security Update : dhcp on SL5.x i386/x86_64 (20120803)

The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. A denial of service flaw was found in the way the dhcpd daemon handled...

Scientific Linux Security Update : bind-dyndb-ldap on SL6.x i386/x86_64 (20120803)

The dynamic LDAP back end is a plug-in for BIND that provides back-end capabilities to LDAP databases. It features support for dynamic updates and internal caching that help to reduce the load on LDAP servers. A flaw was found in the way bind-dyndb-ldap performed the escaping of names from DNS...

Scientific Linux Security Update : libreoffice on SL6.x i386/x86_64 (20120801)

LibreOffice is an open source, community-developed office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet application, presentation manager, formula editor, and a drawing program. Multiple heap-based buffer overflow flaws were found in the way...

Scientific Linux Security Update : icedtea-web on SL6.x i386/x86_64 (20120731)

The IcedTea-Web project provides a Java web browser plug-in and an implementation of Java Web Start, which is based on the Netx project. It also contains a configuration tool for managing deployment settings for the plug-in and Web Start implementations. An uninitialized pointer use flaw was foun...

Scientific Linux Security Update : xen on SL5.x i386/x86_64 (20120731)

The xen packages contain administration tools and the xend service for managing the kernel-xen kernel for virtualization on Scientific Linux. A flaw was found in the way the pyGrub boot loader handled compressed kernel images. A privileged guest user in a para-virtualized guest a DomU could use...

Scientific Linux Security Update : krb5 on SL6.x i386/x86_64 (20120731)

Kerberos is a network authentication system which allows clients and servers to authenticate to each other using symmetric encryption and a trusted third party, the Key Distribution Center KDC. An uninitialized pointer use flaw was found in the way the MIT Kerberos KDC handled initial...