Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20200122)

Security Fixes : - OpenJDK: Use of unsafe RSA-MD5 checkum in Kerberos TGS Security, 8229951 CVE-2020-2601 - OpenJDK: Serialization filter changes via jdk.serialFilter property modification Serialization, 8231422 CVE-2020-2604 - OpenJDK: Improper checks of SASL message properties in GssKrb5Base...

Scientific Linux Security Update : python-reportlab on SL7.x x86_64 (20200122)

Security Fixes : - python-reportlab: code injection in colors.py allows attacker to execute code CVE-2019-17626 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133197; scriptversion"1.4";...

Scientific Linux Security Update : libarchive on SL7.x x86_64 (20200122)

Security Fixes : - libarchive: use-after-free in archivereadformatrarreaddata when there is an error in the decompression of an archive entry CVE-2019-18408 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133195;...

Scientific Linux Security Update : openslp on SL6.x i386/x86_64 (20200122)

Security Fixes : - openslp: Heap-based buffer overflow in ProcessSrvRqst in slpdprocess.c leading to remote code execution CVE-2019-5544 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133196; scriptversion"1.7";...

Scientific Linux Security Update : apache-commons-beanutils on SL7.x (noarch) (20200121)

Security Fixes : - apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default CVE-2019-10086 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133192; scriptversion"1.6";...

Scientific Linux Security Update : python-reportlab on SL6.x i386/x86_64 (20200121)

Security Fixes : - python-reportlab: code injection in colors.py allows attacker to execute code CVE-2019-17626 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133193; scriptversion"1.4";...

Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20200121)

Security Fixes : - OpenJDK: Use of unsafe RSA-MD5 checkum in Kerberos TGS Security, 8229951 CVE-2020-2601 - OpenJDK: Serialization filter changes via jdk.serialFilter property modification Serialization, 8231422 CVE-2020-2604 - OpenJDK: Improper checks of SASL message properties in GssKrb5Base...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200116)

Security Fixes : - Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement CVE-2019-17026 - Mozilla: Bypass of @namespace CSS sanitization during pasting CVE-2019-17016 - Mozilla: Type Confusion in XPCVariant.cpp CVE-2019-17017 - Mozilla: Memory safety bugs fixed in Firef...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200116)

Security Fixes : - Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement CVE-2019-17026 - Mozilla: Bypass of @namespace CSS sanitization during pasting CVE-2019-17016 - Mozilla: Type Confusion in XPCVariant.cpp CVE-2019-17017 - Mozilla: Memory safety bugs fixed in Firef...

Scientific Linux Security Update : git on SL7.x x86_64 (20200116)

Security Fixes : - git: Remote code execution in recursive clones with nested submodules CVE-2019-1387 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133029; scriptversion"1.4";...

Scientific Linux Security Update : java-11-openjdk on SL7.x x86_64 (20200116)

Security Fixes : - OpenJDK: Use of unsafe RSA-MD5 checkum in Kerberos TGS Security, 8229951 CVE-2020-2601 - OpenJDK: Serialization filter changes via jdk.serialFilter property modification Serialization, 8231422 CVE-2020-2604 - OpenJDK: Improper checks of SASL message properties in GssKrb5Base...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200113)

This update upgrades Firefox to version 68.4.1 ESR. Security Fixes : - Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement CVE-2019-17026 - Mozilla: Bypass of @namespace CSS sanitization during pasting CVE-2019-17016 - Mozilla: Type Confusion in XPCVariant.cpp...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20200113)

This update upgrades Firefox to version 68.4.1 ESR. Security Fixes : - Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement CVE-2019-17026 - Mozilla: Bypass of @namespace CSS sanitization during pasting CVE-2019-17016 - Mozilla: Type Confusion in XPCVariant.cpp...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20191217)

Security Fixes : - Kernel: KVM: OOB memory access via mmio ring buffer CVE-2019-14821 Bug Fixes : - KEYS: prevent creating a different user's keyrings SL-6.10 - BUG: unable to handle kernel NULL pointer dereference at null - long I/O stalls with bnx2fc from not masking off scope bits of retry del...

Scientific Linux Security Update : freetype on SL6.x i386/x86_64 (20191217)

Security Fixes : - freetype: a heap-based buffer over-read in T1GetPrivateDict in type1/t1parse.c leading to information disclosure CVE-2015-9381 - freetype: mishandling psparserskipPStoken in an FTNewMemoryFace operation in skipcomment, psaux/psobjs.c, leads to a buffer over-read CVE-2015-9382 C...

Scientific Linux Security Update : openslp on SL7.x x86_64 (20191216)

Security Fixes : - openslp: Heap-based buffer overflow in ProcessSrvRqst in slpdprocess.c leading to remote code execution CVE-2019-5544 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid132085; scriptversion"1.7";...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20191210)

This update upgrades Thunderbird to version 68.3.0. Security Fixes : - Mozilla: Use-after-free in worker destruction CVE-2019-17008 - Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 CVE-2019-17012 - Mozilla: Buffer overflow in plain text serializer CVE-2019-17005 - Mozilla:...

Scientific Linux Security Update : nss-softokn on SL6.x i386/x86_64 (20191210)

Security Fixes : - nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSCEncryptUpdate CVE-2019-11745 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid131988; scriptversion"1.4";...

Scientific Linux Security Update : nss, nss-softokn, nss-util on SL7.x x86_64 (20191210)

Security Fixes : - nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSCEncryptUpdate CVE-2019-11745 - nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault CVE-2019-11729 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20191205)

Security Fixes : - Mozilla: Use-after-free in worker destruction CVE-2019-17008 - Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 CVE-2019-17012 - Mozilla: Buffer overflow in plain text serializer CVE-2019-17005 - Mozilla: Use-after-free when performing device orientation...