Scientific Linux Security Update : thunderbird on SL6.x i686/x86_64 (2020:4947)

The remote Scientific Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:4947-1 advisory. - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 CVE-2020-15683 - chromium-browser: Use after free in WebRTC CVE-2020-15969...

Scientific Linux Security Update : python on SL7.x i686/x86_64 (2020:5009)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5009-1 advisory. - python: infinite loop in the tarfile module via crafted TAR archive CVE-2019-20907 Note that Nessus has not tested for this issue but has instead relied...

Scientific Linux Security Update : freetype on SL7.x x86_64 (20201104)

Security Fixes : - freetype: Heap-based buffer overflow due to integer truncation in LoadSBitPng CVE-2020-15999 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid142556; scriptversion"1.9";...

Scientific Linux Security Update : libX11 on SL7.x x86_64 (20201104)

Security Fixes : - libX11: integer overflow leads to double free in locale handling CVE-2020-14363 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid142563; scriptversion"1.3";...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20201104)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 CVE-2020-15683 - chromium-browser: Use after free in WebRTC CVE-2020-15969 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid142548;...

Scientific Linux Security Update : xorg-x11-server on SL7.x x86_64 (20201104)

-- Security Fixes : - xorg-x11-server: Out-of-bounds access in XkbSetNames function CVE-2020-14345 - xorg-x11-server: Integer underflow in the X input extension protocol CVE-2020-14346 - xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability CVE-2020-14361 -...

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20201027)

Security Fixes : - OpenJDK: Credentials sent over unencrypted LDAP connection JNDI, 8237990 CVE-2020-14781 - OpenJDK: Certificate blacklist bypass via alternate certificate encodings Libraries, 8237995 CVE-2020-14782 - OpenJDK: Integer overflow leading to out-of-bounds access Hotspot, 8241114...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20201026)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 CVE-2020-15683 - chromium-browser: Use after free in WebRTC CVE-2020-15969 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid142012;...

Scientific Linux Security Update : java-11-openjdk on SL7.x x86_64 (20201022)

Security Fixes : - OpenJDK: Credentials sent over unencrypted LDAP connection JNDI, 8237990 CVE-2020-14781 - OpenJDK: Certificate blacklist bypass via alternate certificate encodings Libraries, 8237995 CVE-2020-14782 - OpenJDK: Integer overflow leading to out-of-bounds access Hotspot, 8241114...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20201022)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 CVE-2020-15683 - chromium-browser: Use after free in WebRTC CVE-2020-15969 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141838;...

Scientific Linux Security Update : libsndfile on SL7.x x86_64 (20201001)

Security Fixes : - libsndfile: buffer over-read in the function i2alawarray in alaw.c CVE-2018-19662 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141650; scriptversion"1.3";...

Scientific Linux Security Update : cloud-init on SL7.x x86_64 (20201001)

Security Fixes : - cloud-init: Use of random.choice when generating random password CVE-2020-8631 - cloud-init: Too short random password length in ccsetpassword in config/ccsetpasswords.py CVE-2020-8632 - cloud-init: default configuration disabled deletion of SSH host keys CVE-2018-10896 C Tenab...

Scientific Linux Security Update : libexif on SL7.x x86_64 (20201001)

Security Fixes : - libexif: out of bound write in exif-data.c CVE-2019-9278 - libexif: out of bounds read due to a missing bounds check in exifdatasavedataentry function in exif-data.c CVE-2020-0093 - libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and...

Scientific Linux Security Update : freerdp on SL7.x x86_64 (20201001)

Security Fixes : - freerdp: Out of bound read in cliprdrserverreceivecapabilities CVE-2020-11018 - freerdp: Out of bound read/write in usb redirection channel CVE-2020-11039 - freerdp: out-of-bounds read in updatereadiconinfo function CVE-2020-11042 - freerdp: out-of-bounds read in...

Scientific Linux Security Update : openldap on SL7.x x86_64 (20201001)

Security Fixes : - openldap: denial of service via nested boolean expressions in LDAP search filters CVE-2020-12243 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141663; scriptversion"1.3";...

Scientific Linux Security Update : webkitgtk4 on SL7.x x86_64 (20201001)

Security Fixes : - webkitgtk: Multiple security issues CVE-2019-6237, CVE-2019-6251, CVE-2019-8506, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587,...

Scientific Linux Security Update : libxml2 on SL7.x x86_64 (20201001)

Security Fixes : - libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c CVE-2019-19956 - libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c CVE-2019-20388 - libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations CVE-2020-7595 C Tenable Network...

Scientific Linux Security Update : openwsman on SL7.x x86_64 (20201001)

Security Fixes : - openwsman: Infinite loop in processconnection allows denial of service CVE-2019-3833 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141728; scriptversion"1.3";...

Scientific Linux Security Update : libcroco on SL7.x x86_64 (20201001)

Security Fixes : - libcroco: Stack overflow in function crparserparseanycore in cr-parser.c CVE-2020-12825 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141761; scriptversion"1.3";...

Scientific Linux Security Update : tomcat on SL7.x x86_64 (20201001)

Security Fixes : - tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS CVE-2020-13935 - tomcat: session fixation when using FORM authentication CVE-2019-17563 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc';...