Scientific Linux Security Update : http-parser on SL7.x x86_64 (20200304)

Security Fixes : - nodejs: HTTP request smuggling using malformed Transfer-Encoding header CVE-2019-15605 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid134273; scriptversion"1.3";...

Scientific Linux Security Update : ppp on SL7.x x86_64 (20200227)

Security Fixes : - ppp: Buffer overflow in the eaprequest and eapresponse functions in eap.c CVE-2020-8597 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid134151; scriptversion"1.6";...

Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64 (20200227)

Security Fixes : - OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS Security, 8229951 CVE-2020-2601 - OpenJDK: Serialization filter changes via jdk.serialFilter property modification Serialization, 8231422 CVE-2020-2604 - OpenJDK: Improper checks of SASL message properties in GssKrb5Base...

Scientific Linux Security Update : ppp on SL6.x i386/x86_64 (20200227)

Security Fixes : - ppp: Buffer overflow in the eaprequest and eapresponse functions in eap.c CVE-2020-8597 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid134150; scriptversion"1.6";...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200224)

Security Fixes : Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 CVE-2020-6800 Mozilla: Out-of-bounds read when processing certain email messages CVE-2020-6793 Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords...

Scientific Linux Security Update : ksh on SL7.x x86_64 (20200224)

Security Fixes : ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection CVE-2019-14868 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid134069; scriptversion"1.4";...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200224)

Security Fixes : Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 CVE-2020-6800 Mozilla: Out-of-bounds read when processing certain email messages CVE-2020-6793 Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords...

Scientific Linux Security Update : python-pillow on SL7.x x86_64 (20200224)

Security Fixes : python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c CVE-2020-5312 python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service CVE-2019-16865 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : sudo on SL7.x x86_64 (20200218)

Security Fixes : - sudo: Stack based buffer overflow when pwfeedback is enabled CVE-2019-18634 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133789; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : java-1.7.0-openjdk on SL7.x x86_64 (20200218)

Security Fixes : - OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS Security, 8229951 CVE-2020-2601 - OpenJDK: Serialization filter changes via jdk.serialFilter property modification Serialization, 8231422 CVE-2020-2604 - OpenJDK: Improper checks of SASL message properties in GssKrb5Base...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200217)

Security Fixes : - Mozilla: Missing bounds check on shared memory read in the parent process CVE-2020-6796 - Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 CVE-2020-6800 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20200217)

Security Fixes : - Mozilla: Missing bounds check on shared memory read in the parent process CVE-2020-6796 - Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 CVE-2020-6800 - Mozilla: Incorrect parsing of template tag could result in JavaScript injection CVE-2020-6798 C Tenable...

Scientific Linux Security Update : ksh on SL6.x i386/x86_64 (20200217)

Security Fixes : - ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection CVE-2019-14868 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133756; scriptversion"1.5";...

Scientific Linux Security Update : spice-gtk on SL6.x i386/x86_64 (20200211)

Security Fixes : - spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows CVE-2018-10893 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133641; scriptversion"1.4";...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20200205)

Security Fixes : - kernel: heap overflow in mwifiexupdatevsie function of Marvell WiFi driver CVE-2019-14816 - kernel: heap-based buffer overflow in mwifiexprocesscountryie function in drivers/net/wireless/marvell/mwifiex/staioctl.c CVE-2019-14895 - kernel: heap overflow in marvell/mwifiex/tdls.c...

Scientific Linux Security Update : ipa on SL7.x x86_64 (20200205)

Security Fixes : - ipa: Denial of service in IPA server due to wrong use of berscanf CVE-2019-14867 - ipa: Batch API logging user passwords to /var/log/httpd/errorlog CVE-2019-10195 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20200205)

Security Fixes : - hw: TSX Transaction Asynchronous Abort TAA CVE-2019-11135 - QEMU: slirp: heap buffer overflow during packet reassembly CVE-2019-14378 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133518;...

Scientific Linux Security Update : git on SL6.x i386/x86_64 (20200203)

Security Fixes : - git: arbitrary code execution via .gitmodules CVE-2018-17456 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133447; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : openjpeg2 on SL7.x x86_64 (20200128)

Security Fixes : - openjpeg: Heap-based buffer overflow in opjt1clbldecodeprocessor CVE-2020-6851 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133388; scriptversion"1.4";...

Scientific Linux Security Update : sqlite on SL7.x x86_64 (20200127)

Security Fixes : - sqlite: fts3: improve shadow table corruption detection CVE-2019-13734 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133339; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...