Scientific Linux Security Update : zsh on SL7.x x86_64 (20190806)

Security Fixes : - zsh: Improper handling of shebang line longer than 64 CVE-2018-13259 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128271; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : curl on SL7.x x86_64 (20190806)

Security Fixes : - curl: Heap-based buffer over-read in the curl tool warning formatting CVE-2018-16842 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128212; scriptversion"1.4";...

Scientific Linux Security Update : samba on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: samba 4.9.1. Security Fixes : - samba: save registry file outside share as unprivileged user CVE-2019-3880 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : ruby on SL7.x x86_64 (20190806)

Security Fixes : - ruby: HTTP response splitting in WEBrick CVE-2017-17742 - ruby: DoS by large request in WEBrick CVE-2018-8777 - ruby: Buffer under-read in Stringunpack CVE-2018-8778 - ruby: Unintentional directory traversal by poisoned NULL byte in Dir CVE-2018-8780 - ruby: Tainted flags are n...

Scientific Linux Security Update : sox on SL7.x x86_64 (20190806)

Security Fixes : - sox: NULL pointer dereference in startread function in xa.c CVE-2017-18189 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128262; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : unzip on SL7.x x86_64 (20190806)

Security Fixes : - unzip: Buffer overflow in list.c resulting in a denial of service CVE-2018-18384 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128269; scriptversion"1.4";...

Scientific Linux Security Update : Xorg on SL7.x x86_64 (20190806)

Security Fixes : - libX11: Crash on invalid reply in XListExtensions in ListExt.c CVE-2018-14598 - libX11: Off-by-one error in XListExtensions in ListExt.c CVE-2018-14599 - libX11: Out of Bounds write in XListExtensions in ListExt.c CVE-2018-14600 - libxkbcommon: Invalid free in...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20190806)

Security Fixes : - systemd: line splitting via fgets allows for state injection during daemon-reexec CVE-2018-15686 - systemd: out-of-bounds read when parsing a crafted syslog message CVE-2018-16866 - systemd: kills privileged process if unprivileged PIDFile was tampered CVE-2018-16888 C Tenable...

Scientific Linux Security Update : ovmf on 7.x (noarch) (2019:2125)

The remote Scientific Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the SLSA-2019:2125-1 advisory. Security Fixes: edk2: Privilege escalation via processing of malformed files in TianoCompress.c CVE-2017-5731 edk2: Privilege escalation via...

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20190806)

Security Fixes : - mysql: MyISAM unspecified vulnerability CPU Jul 2018 CVE-2018-3058 - mysql: Server: Security: Privileges unspecified vulnerability CPU Jul 2018 CVE-2018-3063 - mysql: Client programs unspecified vulnerability CPU Jul 2018 CVE-2018-3081 - mysql: Server: Storage Engines unspecifi...

Scientific Linux Security Update : rsyslog on SL7.x x86_64 (20190806)

Security Fixes : - rsyslog: imptcp: integer overflow when Octet-Counted TCP Framing is enabled CVE-2018-16881 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128259; scriptversion"1.4";...

Scientific Linux Security Update : uriparser on SL7.x x86_64 (20190806)

uriparser: Out-of-bounds write via uriComposeQuery or uriComposeQueryEx function CVE-2018-19198 uriparser: Integer overflow via uriComposeQuery or uriComposeQueryEx function CVE-2018-19199 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...

Scientific Linux Security Update : polkit on SL7.x x86_64 (20190806)

Security Fixes : - polkit: Improper handling of user with uid INTMAX leading to authentication bypass CVE-2018-19788 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128251; scriptversion"1.4";...

Scientific Linux Security Update : libwpd on SL7.x x86_64 (20190806)

Security Fixes : - libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp CVE-2018-19208 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128238; scriptversion"1.4";...

Scientific Linux Security Update : kde-workspace on SL7.x x86_64 (20190806)

Security Fixes : - kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element CVE-2018-6790 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128224; scriptversion"1.4";...

Scientific Linux Security Update : openssl on SL7.x x86_64 (20190806)

Security Fixes : - openssl: 0-byte record padding oracle CVE-2019-1559 - openssl: timing side channel attack in the DSA signature algorithm CVE-2018-0734 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128247;...

Scientific Linux Security Update : blktrace on SL7.x x86_64 (20190806)

Security Fixes : - blktrace: buffer overflow in the devmapread function in btt/devmap.c CVE-2018-10689 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128210; scriptversion"1.4";...

Scientific Linux Security Update : libjpeg-turbo on SL7.x x86_64 (20190806)

Security Fixes : - libjpeg: NULL pointer dereference in cjpeg CVE-2016-3616 - libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get8bitrow in rdbmp.c leads to denial of service CVE-2018-14498 - libjpeg-turbo: Divide By Zero in allocsarray function in jmemmgr.c CVE-2018-11212 -...

Scientific Linux Security Update : compat-libtiff3 on SL7.x x86_64 (20190806)

Security Fixes : - libtiff: NULL pointer dereference in tifprint.c:TIFFPrintDirectory causes a denial of service CVE-2018-7456 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128211; scriptversion"1.4";...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20190812)

Security Fixes : - ghostscript: -dSAFER escape via .buildfont1 701394 CVE-2019-10216 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid128273; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...