Scientific Linux Security Update : python3 on SL7.x x86_64 (20200407)

python: Cookie domain check returns incorrect results python: email.utils.parseaddr wrongly parses email addresses C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135830; scriptversion"1.3";...

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20200407)

mysql: Server: Pluggable Auth unspecified vulnerability CPU Jul 2019 mysql: Server: Security: Privileges unspecified vulnerability CPU Jul mysql: Server: XML unspecified vulnerability CPU Jul 2019 mysql: Server: Parser unspecified vulnerability CPU Jul 2019 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : libsndfile on SL7.x x86_64 (20200407)

libsndfile: stack-based buffer overflow in sndfile-deinterleave utility C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135818; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : python-twisted-web on SL7.x x86_64 (20200407)

python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135832; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : bind on SL7.x x86_64 (20200407)

bind: TCP Pipelining doesn't limit TCP clients on a single connection bind: An assertion failure if a trust anchor rolls over to an unsupported key algorithm when using managed-keys bind: Controls for zone transfers may not be properly applied to DLZs if the zones are writable C Tenable Network...

Scientific Linux Security Update : doxygen on SL7.x x86_64 (20200407)

doxygen: cross-site scripting in templates/html/searchopensearch.php C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135806; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : libreoffice on SL7.x x86_64 (20200407)

libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands libreoffice: Insufficient URL validation allowing LibreLogo script execution libreoffice: LibreLogo global-event script execution libreoffice: Insufficient URL encoding flaw in allowed script location check...

Scientific Linux Security Update : httpd on SL7.x x86_64 (20200407)

httpd: modsessioncookie does not respect expiry time httpd: Out of bounds write in modauthnzldap when using too small Accept-Language values httpd: Out of bounds access after failure in reading the HTTP request C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : mutt on SL7.x x86_64 (20200407)

mutt: IMAP header caching path traversal vulnerability C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135823; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : GNOME on SL7.x x86_64 (20200407)

gnome-shell: partial lock screen bypass C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135796; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15"; scriptcveid"CVE-2019-3820";...

Scientific Linux Security Update : avahi on SL7.x x86_64 (20200407)

avahi: Multicast DNS responds to unicast queries outside of local network C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135799; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20200407)

kernel: out of bound read in DVB connexant driver. kernel: Missing permissions check for requestkey destination allows local attackers to add keys to keyring without Write permission kernel: denial of service via ioctl call in network tun handling kernel: usb: missing size check in the...

Scientific Linux Security Update : nbdkit on SL7.x x86_64 (20200407)

nbdkit: denial of service due to premature opening of back-end connection C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135824; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : php on SL7.x x86_64 (20200407)

php: Reflected XSS on PHAR 404 page php: Stack-based buffer under-read in phpstreamurlwraphttpex in httpfopenwrapper.c when parsing HTTP response php: Reflected XSS vulnerability on PHAR 403 and 404 error pages php: Out-of-bounds read in base64decodexmlrpc in ext/xmlrpc/libxmlrpc/base64.c C Tenab...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200416)

Security Fixes : - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 - Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6821 - Mozilla: Memory safety...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200414)

Security Fixes : - Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6821 - Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7 CVE-2020-6825 - Mozilla: Out of bounds write in GMPDecodeData when processing large images CVE-2020-6822 ...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20200408)

Security Fixes : - QEMU: Slirp: potential OOB access due to unsafe snprintf usages Bug Fixes : - QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. rhel-6 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid135382;...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200407)

Security Fixes : - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid135278;...

Scientific Linux Security Update : krb5-appl on SL6.x i386/x86_64 (20200407)

Security Fixes : - telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code CVE-2020-10188 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135279; scriptversion"1.6";...

Scientific Linux Security Update : telnet on SL6.x i386/x86_64 (20200406)

Security Fixes : - telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code CVE-2020-10188 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135262; scriptversion"1.6";...