Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200506)

Security Fixes : - Mozilla: Use-after-free during worker shutdown CVE-2020-12387 - Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 CVE-2020-12395 - Mozilla: Buffer overflow in SCTP chunk input validation CVE-2020-6831 - Mozilla: Arbitrary local file access with 'Copy as cURL'...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20200422) (Stack Clash)

Security Fixes : - kernel: rtlp2pnoaie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel lacks a certain upper-bound check, leading to a buffer overflow CVE-2019-17666 - kernel: offset2lib allows for the stack guard page to be jumped over CVE-2017-1000371 C Tenable Network Security...

Scientific Linux Security Update : python-twisted-web on SL7.x x86_64 (20200423)

Security Fixes : - python-twisted: HTTP request smuggling when presented with two Content-Length headers CVE-2020-10108 - python-twisted: HTTP request smuggling when presented with a Content-Length and a chunked Transfer-Encoding header CVE-2020-10109 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : git on SL7.x x86_64 (20200421)

Security Fixes : - git: Crafted URL containing new lines can cause credential leak CVE-2020-5260 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid135886; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate...

Scientific Linux Security Update : qt on SL7.x x86_64 (20200407)

qt5-qtbase: Double free in QXmlStreamReader qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service qt5-qtbase: QImage allocation failure in qgifhandler qt5-qtimageformats: QTgaFile CPU...

Scientific Linux Security Update : samba on SL7.x x86_64 (20200407)

samba: Combination of parameters and permissions can allow user to escape from the share path definition samba: smb client vulnerable to filenames containing path separators C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20200407)

QEMU: Slirp: potential OOB access due to unsafe snprintf usages C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid135833; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/29";...

Scientific Linux Security Update : libqb on SL7.x x86_64 (20200407)

libqb: Insecure treatment of IPC temporary files C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135816; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : squid on SL7.x x86_64 (20200407)

squid: Incorrect pointer handling when processing ESI Responses can lead to denial of service squid: Incorrect pointer handling in HTTP processing and certificate download can lead to denial of service squid: XSS via username or auth parameter in cachemgr.cgi C Tenable Network Security, Inc. The...

Scientific Linux Security Update : file on SL7.x x86_64 (20200407)

file: out-of-bounds read via a crafted ELF file C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135809; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15"; scriptcveid"CVE-2018-10360...

Scientific Linux Security Update : zziplib on SL7.x x86_64 (20200407)

zziplib: directory traversal in unzzipcat in the bins/unzzipcat-mem.c C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135843; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : wireshark on SL7.x x86_64 (20200407)

wireshark: Out-of-bounds read in packet-ldss.c wireshark: Multiple dissectors could crash wnpa-sec-2018-36 wireshark: DICOM dissector infinite loop wnpa-sec-2018-39 wireshark: Bazaar dissector infinite loop wnpa-sec-2018-40 wireshark: SIGCOMP dissector crash in packet-sigcomp.c wireshark: Radiota...

Scientific Linux Security Update : expat on SL7.x x86_64 (20200407)

expat: Integer overflow leading to buffer overflow in XMLGetBuffer C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135808; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : mutt on SL7.x x86_64 (20200407)

mutt: IMAP header caching path traversal vulnerability C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135823; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : python-twisted-web on SL7.x x86_64 (20200407)

python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135832; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : okular on SL7.x x86_64 (20200407)

okular: Directory traversal in function unpackDocumentArchive in core/document.cpp C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135826; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : net-snmp on SL7.x x86_64 (20200407)

net-snmp: NULL pointer exception in snmpoidcompare in snmplib/snmpapi.c resulting in a denial of service C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135825; scriptversion"1.3";...

Scientific Linux Security Update : poppler and evince on SL7.x x86_64 (20200407)

poppler: integer overflow in Parser::makeStream in Parser.cc poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc poppler: integer overflow in JPXStream::init function leading to...

Scientific Linux Security Update : php on SL7.x x86_64 (20200407)

php: Reflected XSS on PHAR 404 page php: Stack-based buffer under-read in phpstreamurlwraphttpex in httpfopenwrapper.c when parsing HTTP response php: Reflected XSS vulnerability on PHAR 403 and 404 error pages php: Out-of-bounds read in base64decodexmlrpc in ext/xmlrpc/libxmlrpc/base64.c C Tenab...

Scientific Linux Security Update : dovecot on SL7.x x86_64 (20200407)

dovecot: Improper certificate validation dovecot: Buffer overflow in indexer-worker process results in privilege escalation C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135805; scriptversion"1.3";...