Scientific Linux Security Update : tomcat on SL7.x (noarch) (2020:5020)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5020-1 advisory. - tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling CVE-2020-1935 Note that Nessus has not tested for this issue but has...

Scientific Linux Security Update : python3 on SL7.x i686/x86_64 (2020:5010)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5010-1 advisory. - python: infinite loop in the tarfile module via crafted TAR archive CVE-2019-20907 - python: DoS via inefficiency in IPv4,6Interface classes...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20201104)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 CVE-2020-15683 - chromium-browser: Use after free in WebRTC CVE-2020-15969 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid142548;...

Scientific Linux Security Update : freetype on SL7.x x86_64 (20201104)

Security Fixes : - freetype: Heap-based buffer overflow due to integer truncation in LoadSBitPng CVE-2020-15999 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid142556; scriptversion"1.9";...

Scientific Linux Security Update : xorg-x11-server on SL7.x x86_64 (20201104)

-- Security Fixes : - xorg-x11-server: Out-of-bounds access in XkbSetNames function CVE-2020-14345 - xorg-x11-server: Integer underflow in the X input extension protocol CVE-2020-14346 - xorg-x11-server: XkbSelectEvents integer underflow privilege escalation vulnerability CVE-2020-14361 -...

Scientific Linux Security Update : libX11 on SL7.x x86_64 (20201104)

Security Fixes : - libX11: integer overflow leads to double free in locale handling CVE-2020-14363 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid142563; scriptversion"1.3";...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20201026)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 CVE-2020-15683 - chromium-browser: Use after free in WebRTC CVE-2020-15969 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid142012;...

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20201027)

Security Fixes : - OpenJDK: Credentials sent over unencrypted LDAP connection JNDI, 8237990 CVE-2020-14781 - OpenJDK: Certificate blacklist bypass via alternate certificate encodings Libraries, 8237995 CVE-2020-14782 - OpenJDK: Integer overflow leading to out-of-bounds access Hotspot, 8241114...

Scientific Linux Security Update : java-11-openjdk on SL7.x x86_64 (20201022)

Security Fixes : - OpenJDK: Credentials sent over unencrypted LDAP connection JNDI, 8237990 CVE-2020-14781 - OpenJDK: Certificate blacklist bypass via alternate certificate encodings Libraries, 8237995 CVE-2020-14782 - OpenJDK: Integer overflow leading to out-of-bounds access Hotspot, 8241114...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20201022)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4 CVE-2020-15683 - chromium-browser: Use after free in WebRTC CVE-2020-15969 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141838;...

Scientific Linux Security Update : spamassassin on SL7.x x86_64 (20201001)

Security Fixes : - spamassassin: crafted email message can lead to DoS CVE-2019-12420 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141762; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : libtiff on SL7.x x86_64 (20201001)

Security Fixes : - libtiff: integer overflow in TIFFCheckMalloc and TIFFCheckRealloc in tifaux.c CVE-2019-14973 - libtiff: integer overflow leading to heap-based buffer overflow in tifgetimage.c CVE-2019-17546 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : pcp on SL7.x x86_64 (20201001)

Security Fixes : - pcp: Local privilege escalation in pcp spec file %post section CVE-2019-3695 - pcp: Local privilege escalation in pcp spec file through migratetempdirs CVE-2019-3696 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : hunspell on SL7.x x86_64 (20201001)

Security Fixes : - hunspell: out-of-bounds read in SuggestMgr::leftcommonsubstring in suggestmgr.cxx CVE-2019-16707 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141683; scriptversion"1.3";...

Scientific Linux Security Update : mod_auth_openidc on SL7.x x86_64 (20201001)

Security Fixes : - modauthopenidc: Open redirect in logout url when using URLs with leading slashes CVE-2019-14857 - modauthopenidc: Open redirect issue exists in URLs with slash and backslash CVE-2019-20479 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : python3 on SL7.x x86_64 (20201001)

Security Fixes : - python: XSS vulnerability in the documentation XML-RPC server in servertitle field CVE-2019-16935 - python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS CVE-2020-8492 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : libcroco on SL7.x x86_64 (20201001)

Security Fixes : - libcroco: Stack overflow in function crparserparseanycore in cr-parser.c CVE-2020-12825 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141761; scriptversion"1.3";...

Scientific Linux Security Update : libpng on SL7.x x86_64 (20201001)

Security Fixes : - libpng: does not check length of chunks against user limit CVE-2017-12652 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141657; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20201001)

Security Fixes : - kernel: use-after-free in sound/core/timer.c CVE-2019-19807 - kernel: out of bounds write in function i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c CVE-2017-18551 - kernel: race condition in smptasktimedout and smptaskdone in drivers/scsi/libsas/sasexpander.c leads to...

Scientific Linux Security Update : tigervnc on SL7.x x86_64 (20201001)

Security Fixes : - tigervnc: Stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder CVE-2019-15691 - tigervnc: Heap buffer overflow triggered from CopyRectDecoder due to incorrect value checks CVE-2019-15692 - tigervnc: Heap buffer overflow in TightDecoder::FilterGradient...