Scientific Linux Security Update : nss_ldap on SL3.x i386/x86_64

When the nssldap plug-in attempted to format the list of a group's members for an application, it did not correctly detect when the space provided to store that list was insufficient. For large groups, this resulted in a corrupt heap, which typically resulted in the calling application crashing, ...

Scientific Linux Security Update : tzdata on SL3.x, SL4.x, SL5.x i386/x86_64

This updated package addresses the following change to Daylight Saving Time DST observations : - during Ramadan, that is, during the period between 2010-08-11 and 2010-09-08, Egypt will suspend DST. The DST period will be officially restored on 2010-09-09. BZ618593, BZ618597, BZ618599 %NASLMINLEV...

Scientific Linux Security Update : freetype on SL5.x, SL6.x i386/x86_64 (20120410)

FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual glyphs efficiently. Multiple flaws were found in the way FreeType handled TrueType Font TTF, Glyph Bitmap Distribution Format BDF, Windows .fnt and .fon, and...

Scientific Linux Security Update : quagga on SL4.x, SL5.x i386/x86_64

A stack-based buffer overflow flaw was found in the way the Quagga bgpd daemon processed certain BGP Route Refresh RR messages. A configured BGP peer could send a specially crafted BGP message, causing bgpd on a target system to crash or, possibly, execute arbitrary code with the privileges of th...

Scientific Linux Security Update : xulrunner on SL5.x i386/x86_64

A race condition flaw was found in the way XULRunner handled Document Object Model DOM element properties. Malicious HTML content could cause an application linked against XULRunner such as Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running the...

Scientific Linux Security Update : samba3x on SL5.x i386/x86_64

Samba is a suite of programs used by machines to share files, printers, and other information. A cross-site scripting XSS flaw was found in the password change page of the Samba Web Administration Tool SWAT. If a remote attacker could trick a user, who was logged into the SWAT interface, into...

Scientific Linux Security Update : virt-v2v on SL6.x x86_64

virt-v2v is a tool for converting and importing virtual machines to libvirt-managed KVM Kernel-based Virtual Machine. Using virt-v2v to convert a guest that has a password-protected VNC console to a KVM guest removed that password protection from the converted guest: after conversion, a password...

Scientific Linux Security Update : libvpx on SL6.x i386/x86_64

An integer overflow flaw, leading to arbitrary memory writes, was found in libvpx. An attacker could create a specially crafted video encoded using the VP8 codec that, when played by a victim with an application using libvpx such as Totem, would cause the application to crash or, potentially,...

Scientific Linux Security Update : evolution28 on SL4.6 i386/x86_64

A flaw was found in the way Evolution parsed iCalendar timezone attachment data. If the Itip Formatter plug-in was disabled and a user opened a mail with a carefully crafted iCalendar attachment, arbitrary code could be executed as the user running Evolution. CVE-2008-1108 Note: the Itip Formatte...

Scientific Linux Security Update : kdenetwork on SL6.x i386/x86_64

A directory traversal flaw was found in the way KGet, a download manager, handled the 'file' element in Metalink files. An attacker could use this flaw to create a specially crafted Metalink file that, when opened, would cause KGet to overwrite arbitrary files accessible to the user running KGet...

Scientific Linux Security Update : poppler on SL5.x i386/x86_64

Alin Rad Pop discovered several flaws in the handling of PDF files. An attacker could create a malicious PDF file that would cause an application linked with poppler to crash, or potentially execute arbitrary code when opened. CVE-2007-4352, CVE-2007-5392, CVE-2007-5393 %NASLMINLEVEL 70300 C...

Scientific Linux Security Update : xen on SL5.x i386/x86_64

Detail : Joris van Rantwijk found a flaw in the Pygrub utility which is used as a boot loader for guest domains. A malicious local administrator of a guest domain could create a carefully crafted grub.conf file which would trigger the execution of arbitrary code outside of that domain...

Scientific Linux Security Update : PyXML on SL4.x, SL5.x i386/x86_64

A buffer over-read flaw was found in the way PyXML's Expat parser handled malformed UTF-8 sequences when processing XML files. A specially crafted XML file could cause Python applications using PyXML's Expat parser to crash while parsing the file. CVE-2009-3720 This update makes PyXML use the...

Scientific Linux Security Update : perl-DBD-Pg on SL5.x, SL6.x i386/x86_64 (20120725)

Perl DBI is a database access Application Programming Interface API for the Perl language. perl-DBD-Pg allows Perl applications to access PostgreSQL database servers. Two format string flaws were found in perl-DBD-Pg. A specially crafted database warning or error message from a server could cause...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues : - A flaw in the dccprcvstateprocess function could allow a remote attacker to cause a denial of service, even when the socket was already closed. CVE-2011-1093,...

Scientific Linux Security Update : enscript on SL3.x, SL4.x, SL5.x i386/x86_64

Several buffer overflow flaws were found in GNU enscript. An attacker could craft an ASCII file in such a way that it could execute arbitrary commands if the file was opened with enscript with the 'special escapes' option -e or --escapes enabled. CVE-2008-3863, CVE-2008-4306, CVE-2008-5078...

Scientific Linux Security Update : firefox on SL5.x, SL4.x, SL3.x i386/x86_64

Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox. CVE-2007-2867, CVE-2007-2868 A flaw was found in the way Firefox...

Scientific Linux Security Update : bash on SL4.x i386/x86_64

It was found that certain scripts bundled with the Bash documentation created temporary files in an insecure way. A malicious, local user could use this flaw to conduct a symbolic link attack, allowing them to overwrite the contents of arbitrary files accessible to the victim running the scripts...

Scientific Linux Security Update : fetchmail on SL5.x, SL4.x, SL3.x i386/x86_64

A flaw was found in the way fetchmail processed certain APOP authentication requests. By sending certain responses when fetchmail attempted to authenticate against an APOP server, a remote attacker could potentially acquire certain portions of a user's authentication credentials. CVE-2007-1558...

Scientific Linux Security Update : gimp on SL5.x i386/x86_64

The GIMP GNU Image Manipulation Program is an image composition and editing program. An integer overflow flaw, leading to a heap-based buffer overflow, was found in the GIMP's Microsoft Windows Bitmap BMP and Personal Computer eXchange PCX image file plug-ins. An attacker could create a specially...