Scientific Linux Security Update : xorg-x11-server on SL7.x i686/x86_64 (2023:0046)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2023:0046-1 advisory. - xorg-x11-server: X.Org Server XkbGetKbdByName use-after-free CVE-2022-4283 - xorg-x11-server: X.Org Server XTestSwapFakeInput stack overflow...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:9072)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:9072-1 advisory. - Mozilla: Arbitrary file read from a compromised content process CVE-2022-46872 - Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2022:9079)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:9079-1 advisory. - Mozilla: Arbitrary file read from a compromised content process CVE-2022-46872 - Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and...

Scientific Linux Security Update : bcel on SL7.x (noarch) (2022:8958)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:8958-1 advisory. - Apache-Commons-BCEL: arbitrary bytecode produced via out-of-bounds writing CVE-2022-42920 Note that Nessus has not tested for this issue but has instead...

Scientific Linux Security Update : grub2 on SL7.x x86_64 (2022:8900)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:8900-1 advisory. - grub2: Integer underflow in grubnetrecvip4packets CVE-2022-28733 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : pki-core on SL7.x x86_64 (2022:8799)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:8799-1 advisory. - pki-core: access to external entities when parsing XML can lead to XXE CVE-2022-2414 Note that Nessus has not tested for this issue but has instead reli...

Scientific Linux Security Update : xorg-x11-server on SL7.x i686/x86_64 (2022:8491)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:8491-1 advisory. - xorg-x11-server: buffer overflow in GetCountedString in xkb/xkb.c CVE-2022-3550 - xorg-x11-server: memory leak in ProcXkbGetKbdByName in...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2022:7337)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7337-1 advisory. - a use-after-free in clsroute filter implementation may lead to privilege escalation CVE-2022-2588 - RetBleed Arbitrary Speculative Code Executi...

Scientific Linux Security Update : pcs on SL7.x x86_64 (2022:7343)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7343-1 advisory. - rubygem-rack: crafted requests can cause shell escape sequences CVE-2022-30123 - jquery: Prototype pollution in object's prototype leading to...

Scientific Linux Security Update : php-pear on SL7.x (noarch) (2022:7340)

The remote Scientific Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the SLSA-2022:7340-1 advisory. - ArchiveTar: allows an unserialization attack because phar: is blocked but PHAR: is not blocked CVE-2020-28948 - ArchiveTar: improper filename...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2022:7184)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7184-1 advisory. - Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators CVE-2022-39249 - Mozilla:...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (2022:7087)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:7087-1 advisory. - 389-ds-base: SIGSEGV in syncrepl CVE-2022-2850 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Scientific Linux Security Update : device-mapper-multipath on SL7.x i686/x86_64 (2022:7186)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:7186-1 advisory. - device-mapper-multipath: Authorization bypass, multipathd daemon listens for client connections on an abstract Unix socket CVE-2022-41974 Note that Ness...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:7069)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7069-1 advisory. - Mozilla: Same-origin policy violation could have leaked cross-origin URLs CVE-2022-42927 - Mozilla: Memory Corruption in JS Engine CVE-2022-429...

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x i686/x86_64 (2022:7002)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7002-1 advisory. - OpenJDK: excessive memory allocation in X.509 certificate parsing Security, 8286533 CVE-2022-21626 - OpenJDK: HttpServer no connection count...

Scientific Linux Security Update : java-11-openjdk on SL7.x i686/x86_64 (2022:7008)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2022:7008-1 advisory. - OpenJDK: improper MultiByte conversion can lead to buffer overflow JGSS, 8286077 CVE-2022-21618 - OpenJDK: excessive memory allocation in X.509...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2022:6998)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:6998-1 advisory. - expat: a use-after-free in the doContent function in xmlparse.c CVE-2022-40674 Note that Nessus has not tested for this issue but has instead relied onl...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2022:6997)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:6997-1 advisory. - expat: a use-after-free in the doContent function in xmlparse.c CVE-2022-40674 Note that Nessus has not tested for this issue but has instead relied onl...

Scientific Linux Security Update : squid on SL7.x x86_64 (2022:6815)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:6815-1 advisory. - squid: buffer-over-read in SSPI and SMB authentication CVE-2022-41318 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : expat on SL7.x i686/x86_64 (2022:6834)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2022:6834-1 advisory. - expat: a use-after-free in the doContent function in xmlparse.c CVE-2022-40674 Note that Nessus has not tested for this issue but has instead relied onl...