Scientific Linux Security Update : libexif on SL6.x i386/x86_64 (20200611)

Security Fixes : - libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS CVE-2020-13112 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid137389; scriptversion"1.3";...

Scientific Linux Security Update : tomcat on SL7.x (noarch) (20200611)

Security Fixes : - tomcat: deserialization flaw in session persistence storage leading to RCE CVE-2020-9484 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid137390; scriptversion"1.7";...

Scientific Linux Security Update : microcode_ctl on SL6.x i386/x86_64 (20200610)

Security Fixes : - hw: Special Register Buffer Data Sampling SRBDS CVE-2020-0543 - hw: L1D Cache Eviction Sampling CVE-2020-0549 - hw: Vector Register Data Sampling CVE-2020-0548 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200610)

Security Fixes : - kernel: NULL pointer dereference due to KEYCTLREAD on negative key CVE-2017-12192 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid137347; scriptversion"1.3";...

Scientific Linux Security Update : freerdp on SL6.x i386/x86_64 (20200609)

Security Fixes : - freerdp: Out-of-bounds write in cryptorsacommon in libfreerdp/crypto/crypto.c CVE-2020-13398 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid137292; scriptversion"1.4";...

Scientific Linux Security Update : freerdp on SL7.x x86_64 (20200609)

Security Fixes : - freerdp: Out-of-bounds write in cryptorsacommon in libfreerdp/crypto/crypto.c CVE-2020-13398 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid137293; scriptversion"1.4";...

Scientific Linux Security Update : unbound on SL7.x x86_64 (20200609)

Security Fixes : - unbound: amplification of an incoming query into a large number of queries directed to a target CVE-2020-12662 - unbound: infinite loop via malformed DNS answers received from upstream servers CVE-2020-12663 C Tenable Network Security, Inc. The descriptive text is C Scientific...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200603)

Security Fixes : - Mozilla: Use-after-free in SharedWorkerService CVE-2020-12405 - Mozilla: JavaScript Type confusion with NativeTypes CVE-2020-12406 - Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 CVE-2020-12410 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20200603)

Security Fixes : - Mozilla: Use-after-free in SharedWorkerService CVE-2020-12405 - Mozilla: JavaScript Type confusion with NativeTypes CVE-2020-12406 - Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 CVE-2020-12410 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : bind on SL6.x i386/x86_64 (20200603)

Security Fixes : - bind: BIND does not sufficiently limit the number of fetches performed when processing referrals CVE-2020-8616 - bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c CVE-2020-8617 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : freerdp on SL7.x x86_64 (20200528)

Security Fixes : - freerdp: Out-of-bounds write in planar.c CVE-2020-11521 - freerdp: Integer overflow in region.c CVE-2020-11523 - freerdp: Out-of-bounds write in interleaved.c CVE-2020-11524 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...

Scientific Linux Security Update : python-virtualenv on SL7.x (noarch) (20200512)

Security Fixes : - python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure CVE-2018-20060 - python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service CVE-2019-11236 - python-requests: Redire...

Scientific Linux Security Update : python-pip on SL7.x (noarch) (20200512)

Security Fixes : - python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure CVE-2018-20060 - python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service CVE-2019-11236 - python-urllib3:...

Scientific Linux Security Update : bind on SL7.x x86_64 (20200601)

Security Fixes : - bind: BIND does not sufficiently limit the number of fetches performed when processing referrals CVE-2020-8616 - bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c CVE-2020-8617 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : git on SL7.x x86_64 (20200529)

Security Fixes : - git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak CVE-2020-11008 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid136991; scriptversion"1.3";...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20200512)

Security Fixes : - kernel: double free may be caused by the function allocatetracebuffer in the file kernel/trace/trace.c CVE-2017-18595 - kernel: use-after-free in blkaddtrace in kernel/trace/blktrace.c CVE-2019-19768 - Kernel: NetLabel: NULL pointer dereference while receiving CIPSO packet with...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200512)

Security Fixes : - Kernel: NetLabel: NULL pointer dereference while receiving CIPSO packet with null category may cause kernel panic CVE-2020-10711 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid136603; scriptversion"1.4";...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200511)

Security Fixes : - Mozilla: Use-after-free during worker shutdown CVE-2020-12387 - Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 CVE-2020-12395 - usrsctp: Buffer overflow in AUTH chunk input validation CVE-2020-6831 - Mozilla: Arbitrary local file access with 'Copy as cURL'...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200511)

Security Fixes : - Mozilla: Use-after-free during worker shutdown CVE-2020-12387 - Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 CVE-2020-12395 - usrsctp: Buffer overflow in AUTH chunk input validation CVE-2020-6831 - Mozilla: Arbitrary local file access with 'Copy as cURL'...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200506)

Security Fixes : - Mozilla: Use-after-free during worker shutdown CVE-2020-12387 - Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 CVE-2020-12395 - Mozilla: Buffer overflow in SCTP chunk input validation CVE-2020-6831 - Mozilla: Arbitrary local file access with 'Copy as cURL'...