Scientific Linux Security Update : selinux-policy on SL5.x i386/x86_64

In accordance with the Scientific Linux errata policy, we are pushing out this selinux-policy bug fix as a security errata http://www.scientificlinux.org/documentation/faq/errata The selinux-policy packages contain the rules that govern how confined processes run on the system. These updated...

Scientific Linux Security Update : spice-xpi on SL5.x i386/x86_64

The spice-xpi package provides a plug-in that allows the SPICE client to run from within Mozilla Firefox. A race condition was found in the way the SPICE Firefox plug-in and the SPICE client communicated. A local attacker could use this flaw to trick the plug-in and the SPICE client into...

Scientific Linux Security Update : dhcp on SL3.x, SL4.x i386/x86_64

The Mandriva Linux Engineering Team discovered a stack-based buffer overflow flaw in the ISC DHCP client. If the DHCP client were to receive a malicious DHCP response, it could crash or execute arbitrary code with the permissions of the client root. CVE-2009-0692 An insecure temporary file use fl...

Scientific Linux Security Update : nss_ldap on SL5.x i386/x86_64

A race condition was discovered in nssldap which affected certain applications which make LDAP connections, such as Dovecot. This could cause nssldap to answer a request for information about one user with information about a different user. CVE-2007-5794 In addition, these updated packages fix t...

Scientific Linux Security Update : sysreport on SL3.x i386/x86_64

This updated version of sysreport addresses an issue in which sysreport gathered stack traces from currently running proceses by default. This potentially-dangerous behavior has been made optional, requiring the '-sysrq' option to be passed to sysreport. %NASLMINLEVEL 70300 C Tenable Network...

Scientific Linux Security Update : libwpd on SL5.x i386/x86_64 (20120626)

libwpd is a library for reading and converting Corel WordPerfect Office documents. A buffer overflow flaw was found in the way libwpd processed certain Corel WordPerfect Office documents .wpd files. An attacker could provide a specially crafted .wpd file that, when opened in an application linked...

Scientific Linux Security Update : libxml2 on SL3.x, SL4.x, SL5.x i386/x86_64

A denial of service flaw was found in the way libxml2 processes certain content. If an application linked against libxml2 processes malformed XML content, it could cause the application to stop responding. CVE-2007-6284 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is ...

Scientific Linux Security Update : t1lib on SL6.x i386/x86_64 (20120124)

The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics AFM files. If a specially crafted font file was opened by an application linked against t1lib, it could cause the applicati...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

Security fixes : - a NULL pointer dereference flaw was found in the sctprcvootb function in the Linux kernel Stream Control Transmission Protocol SCTP implementation. A remote attacker could send a specially crafted SCTP packet to a target system, resulting in a denial of service. CVE-2010-0008,...

Scientific Linux Security Update : evolution on SL3.x i386/x86_64

It was discovered that evolution did not properly validate NTLM NT LAN Manager authentication challenge packets. A malicious server using NTLM authentication could cause evolution to disclose portions of its memory or crash during user authentication. CVE-2009-0582 An integer overflow flaw which...

Scientific Linux Security Update : nss and nspr on SL4.x, SL5.x, SL6.x i386/x86_64

Network Security Services NSS is a set of libraries designed to support the cross-platform development of security-enabled client and server applications. Netscape Portable Runtime NSPR provides platform independence for non-GUI operating system facilities. It was found that a Certificate Authori...

Scientific Linux Security Update : openldap on SL5.x i386/x86_64

A flaw was found in the way OpenLDAP's slapd daemon handled malformed objectClasses LDAP attributes. A local or remote attacker could create an LDAP request which could cause a denial of service by crashing slapd. CVE-2007-5707 In addition, the following feature was added : - OpenLDAP client tool...

Scientific Linux Security Update : vnc on SL3.x, SL4.x, SL5.x i386/x86_64

An insufficient input validation flaw was discovered in the VNC client application, vncviewer. If an attacker could convince a victim to connect to a malicious VNC server, or when an attacker was able to connect to vncviewer running in the 'listen' mode, the attacker could cause the victim's...

Scientific Linux Security Update : libexif on SL5.x, SL4.x i386/x86_64

An infinite recursion flaw was found in the way libexif parses Exif image tags. If a victim opens a carefully crafted Exif image file, it could cause the application linked against libexif to crash. CVE-2007-6351 An integer overflow flaw was found in the way libexif parses Exif image tags. If a...

Scientific Linux Security Update : bind on SL5.x, SL6.x i386/x86_64 (20120607)

"The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Scientific Linux Security Update : squirrelmail on SL5.x, SL4.x, SL3.x i386/x86_64

Several HTML filtering bugs were discovered in SquirrelMail. An attacker could inject arbitrary JavaScript leading to cross-site scripting attacks by sending an e-mail viewed by a user within SquirrelMail. CVE-2007-1262 Squirrelmail did not sufficiently check arguments to IMG tags in HTML e-mail...

Scientific Linux Security Update : e2fsprogs on SL5.x, SL4.x, SL3.x i386/x86_64

Multiple integer overflow flaws were found in the way e2fsprogs processes file system content. If a victim opens a carefully crafted file system with a program using e2fsprogs, it may be possible to execute arbitrary code with the permissions of the victim. It may be possible to leverage this fla...

Scientific Linux Security Update : apr on SL6.x i386/x86_64

The Apache Portable Runtime APR is a portability library used by the Apache HTTP Server and other projects. It provides a free library of C data structures and routines. The fix for CVE-2011-0419 introduced an infinite loop flaw in the aprfnmatch function when the APRFNMPATHNAME matching flag was...

Scientific Linux Security Update : python on SL4.x i386/x86_64

Multiple flaws were found in the Python rgbimg module. If an application written in Python was using the rgbimg module and loaded a specially crafted SGI image file, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the applicatio...

Scientific Linux Security Update : rpm on SL4.x i386/x86_64

It was discovered that RPM did not remove setuid and setgid bits set on binaries when upgrading or removing packages. A local attacker able to create hard links to binaries could use this flaw to keep those binaries on the system, at a specific version level and with the setuid or setgid bit set,...