Scientific Linux Security Update : patch on SL7.x x86_64 (20190806)

Security Fixes : - patch: Out-of-bounds access in pchwriteline function in pch.c CVE-2016-10713 - patch: Double free of memory in pch.c:anotherhunk causes a crash CVE-2018-6952 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : ovmf on 7.x (noarch) (2019:2125)

The remote Scientific Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the SLSA-2019:2125-1 advisory. Security Fixes: edk2: Privilege escalation via processing of malformed files in TianoCompress.c CVE-2017-5731 edk2: Privilege escalation via...

Scientific Linux Security Update : python-requests on SL7.x x86_64 (20190806)

Security Fixes : - python-requests: Redirect from HTTPS to HTTP does not remove Authorization header CVE-2018-18074 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128255; scriptversion"1.5";...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20190806)

Security Fixes : - systemd: line splitting via fgets allows for state injection during daemon-reexec CVE-2018-15686 - systemd: out-of-bounds read when parsing a crafted syslog message CVE-2018-16866 - systemd: kills privileged process if unprivileged PIDFile was tampered CVE-2018-16888 C Tenable...

Scientific Linux Security Update : Xorg on SL7.x x86_64 (20190806)

Security Fixes : - libX11: Crash on invalid reply in XListExtensions in ListExt.c CVE-2018-14598 - libX11: Off-by-one error in XListExtensions in ListExt.c CVE-2018-14599 - libX11: Out of Bounds write in XListExtensions in ListExt.c CVE-2018-14600 - libxkbcommon: Invalid free in...

Scientific Linux Security Update : procps-ng on SL7.x x86_64 (20190806)

Security Fixes : - procps-ng, procps: Local privilege escalation in top CVE-2018-1122 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128253; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : libsolv on SL7.x x86_64 (20190806)

Security Fixes : - libsolv: NULL pointer dereference in function testcaseread CVE-2018-20532 - libsolv: NULL pointer dereference in function testcasestr2depcomplex CVE-2018-20533 - libsolv: illegal address access in poolwhatprovides in src/pool.h CVE-2018-20534 C Tenable Network Security, Inc. Th...

Scientific Linux Security Update : libssh2 on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: libssh2 1.8.0. Security Fixes : - libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read CVE-2019-3858 - libssh2: Out-of-bounds reads with specially crafted SSH packets CVE-2019-386...

Scientific Linux Security Update : unixODBC on SL7.x x86_64 (20190806)

Security Fixes : - unixODBC: Buffer overflow in unicodetoansicopy can lead to crash or other unspecified impact CVE-2018-7409 - unixODBC: Insecure buffer copy in SQLWriteFileDSN function in odbcinst/SQLWriteFileDSN.c CVE-2018-7485 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20190812)

Security Fixes : - ghostscript: -dSAFER escape via .buildfont1 701394 CVE-2019-10216 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid128273; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : libtiff on SL7.x x86_64 (20190806)

Security Fixes : - libtiff: buffer overflow in gif2tiff CVE-2016-3186 - libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution CVE-2018-12900 - libtiff: Out-of-bounds write in tifjbig.c CVE-2018-18557 - libtiff: NUL...

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20190806)

Security Fixes : - mysql: MyISAM unspecified vulnerability CPU Jul 2018 CVE-2018-3058 - mysql: Server: Security: Privileges unspecified vulnerability CPU Jul 2018 CVE-2018-3063 - mysql: Client programs unspecified vulnerability CPU Jul 2018 CVE-2018-3081 - mysql: Server: Storage Engines unspecifi...

Scientific Linux Security Update : advancecomp on SL7.x x86_64 (20190806)

Security Fixes : - advancecomp: NULL pointer dereference in function beuint32read in endianrw.h CVE-2019-8379 - advancecomp: denial of service in function advpngunfilter8 in lib/png.c CVE-2019-8383 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; i...

Scientific Linux Security Update : zziplib on SL7.x x86_64 (20190806)

Security Fixes : - zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c CVE-2018-6541 - zziplib: Memory leak triggered in the function zzipparserootdirectory in zip.c CVE-2018-16548 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : uriparser on SL7.x x86_64 (20190806)

uriparser: Out-of-bounds write via uriComposeQuery or uriComposeQueryEx function CVE-2018-19198 uriparser: Integer overflow via uriComposeQuery or uriComposeQueryEx function CVE-2018-19199 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...

Scientific Linux Security Update : rsyslog on SL7.x x86_64 (20190806)

Security Fixes : - rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled CVE-2018-16881 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128259; scriptversion"1.4";...

Scientific Linux Security Update : libvirt on SL7.x x86_64 (20190806)

Security Fixes : - libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function CVE-2019-3840 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128237; scriptversion"1.6";...

Scientific Linux Security Update : zsh on SL7.x x86_64 (20190806)

Security Fixes : - zsh: Improper handling of shebang line longer than 64 CVE-2018-13259 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128271; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : curl on SL7.x x86_64 (20190806)

Security Fixes : - curl: Heap-based buffer over-read in the curl tool warning formatting CVE-2018-16842 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128212; scriptversion"1.4";...

Scientific Linux Security Update : tomcat on SL7.x x86_64 (20190806)

Security Fixes : - tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources CVE-2018-1304 - tomcat: Late application of security constraints can lead to resource exposure for unauthorised users CVE-2018-1305 - tomcat: Insecure defaults in...