Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20191205)

Security Fixes : - Mozilla: Use-after-free in worker destruction CVE-2019-17008 - Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 CVE-2019-17012 - Mozilla: Buffer overflow in plain text serializer CVE-2019-17005 - Mozilla: Use-after-free when performing device orientation...

Scientific Linux Security Update : SDL on SL7.x x86_64 (20191202)

Security Fixes : - SDL: CVE-2019-13616 not fixed in Red Hat Enterprise Linux 7 erratum RHSA-2019:3950 CVE-2019-14906 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid131679; scriptversion"1.5";...

Scientific Linux Security Update : tcpdump on SL7.x x86_64 (20191202)

Security Fixes : - tcpdump: Stack-based buffer over-read in print-hncp.c:printprefix via crafted pcap CVE-2018-19519 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid131680; scriptversion"1.4";...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (20191202)

Security Fixes : - 389-ds-base: Read permission check bypass via the deref plugin CVE-2019-14824 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid131531; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20191114)

Security Fixes : - ghostscript: -dSAFER escape in .charkeys 701841 CVE-2019-14869 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid131054; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20191114)

Security Fixes : - hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write CVE-2019-0155 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid131056; scriptversion"1.5";...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20191114)

Security Fixes : - hw: Intel GPU blitter manipulation can allow for arbitrary kernel memory write CVE-2019-0155 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References section. ...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20191113)

Security Fixes : - hw: Machine Check Error on Page Size Change IFU CVE-2018-12207 - hw: TSX Transaction Asynchronous Abort TAA CVE-2019-11135 - Kernel: vhostnet: infinite loop while receiving packets leads to DoS CVE-2019-3900 - hw: Intel GPU Denial Of Service while accessing MMIO in lower power...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20191113)

Security Fixes : - hw: Machine Check Error on Page Size Change IFU CVE-2018-12207 - hw: TSX Transaction Asynchronous Abort TAA CVE-2019-11135 - hw: Intel GPU Denial Of Service while accessing MMIO in lower power state CVE-2019-0154 For more details about the security issues, including the impact,...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20191106)

This update upgrades Thunderbird to version 68.2.0. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 CVE-2019-11764 - Mozilla: Use-after-free when creating index updates in IndexedDB CVE-2019-11757 - Mozilla: Potentially exploitable crash due to 360 Total...

Scientific Linux Security Update : sudo on SL6.x i386/x86_64 (20191106)

Security Fixes : - sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword CVE-2019-14287 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid130618; scriptversion"1.6";...

Scientific Linux Security Update : php on SL6.x i386/x86_64 (20191031)

Security Fixes : - php: underflow in envpathinfo in fpmmain.c CVE-2019-11043 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid130499; scriptversion"1.11";...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20191031)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 CVE-2019-11764 - Mozilla: Use-after-free when creating index updates in IndexedDB CVE-2019-11757 - Mozilla: Potentially exploitable crash due to 360 Total Security CVE-2019-11758 - Mozilla: Stack buffer overfl...

Scientific Linux Security Update : php on SL7.x x86_64 (20191031)

Security Fixes : - php: underflow in envpathinfo in fpmmain.c CVE-2019-11043 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid130447; scriptversion"1.11";...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20191029)

This update upgrades Thunderbird to version 68.2.0. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 CVE-2019-11764 - Mozilla: Use-after-free when creating index updates in IndexedDB CVE-2019-11757 - Mozilla: Potentially exploitable crash due to 360 Total...

Scientific Linux Security Update : sudo on SL7.x x86_64 (20191024)

Security Fixes : - sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword CVE-2019-14287 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid130252; scriptversion"1.6";...

Scientific Linux Security Update : Important: OpenAFS on SL6.x, SL7.x i386/x86_64 (20191023)

"Security Fixes : - Fix OPENAFS-SA-2019-001: information leakage in failed RPC output Generated RPC handler routines ran output variables through XDR encoding even when the call had failed and would shortly be aborted and for which uninitialized output variables is common C Tenable Network...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20191023)

This update upgrades Firefox to version 68.2.0 ESR. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 CVE-2019-11764 - Mozilla: Use-after-free when creating index updates in IndexedDB CVE-2019-11757 - Mozilla: Potentially exploitable crash due to 360 Total...

Scientific Linux Security Update : java-1.7.0-openjdk on SL7.x x86_64 (20191022)

Security Fixes : - OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler Networking, 8223892 CVE-2019-2978 - OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection Networking, 8225298 CVE-2019-2989 - OpenJDK: Missing restrictions on use of custom SocketImpl...

Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20191018)

Security Fixes : - OpenJDK: Improper handling of Kerberos proxy credentials Kerberos, 8220302 CVE-2019-2949 - OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn Scripting, 8223518 CVE-2019-2975 - OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler...