Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20190409)

Security Fixes : - kernel: Missing check in fs/inode.c:inodeinitowner does not clear SGID bit on non-directories for non-members CVE-2018-13405 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid123965; scriptversion"1.4";...

Scientific Linux Security Update : openssh on SL6.x i386/x86_64 (20190409)

Security Fixes : - openssh: User enumeration via malformed packets in authentication requests CVE-2018-15473 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid123966; scriptversion"1.4";...

Scientific Linux Security Update : python on SL7.x x86_64 (20190408)

Security Fixes : - python: Information Disclosure due to urlsplit improper NFKC normalization CVE-2019-9636 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid123917; scriptversion"1.4";...

Scientific Linux Security Update : freerdp on SL7.x x86_64 (20190402)

Security Fixes : - freerdp: Integer truncation leading to heap-based buffer overflow in updatereadbitmapupdate function CVE-2018-8786 - freerdp: Integer overflow leading to heap-based buffer overflow in gdiBitmapDecompress function CVE-2018-8787 - freerdp: Out-of-bounds write in nscrledecode...

Scientific Linux Security Update : libssh2 on SL7.x x86_64 (20190328)

Security Fixes : - libssh2: Integer overflow in transport read resulting in out of bounds write CVE-2019-3855 - libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write CVE-2019-3856 - libssh2: Integer overflow in SSH packet processing channel resulting in out o...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20190328)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 CVE-2019-9788 - Mozilla: Use-after-free when removing in-use DOM elements CVE-2019-9790 - Mozilla: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey CVE-2019-9791...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20190328)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 CVE-2019-9788 - Mozilla: Use-after-free when removing in-use DOM elements CVE-2019-9790 - Mozilla: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey CVE-2019-9791...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20190327)

This update upgrades Firefox to version 60.6.1 ESR. Security Fixes : - Mozilla: IonMonkey MArraySlice has incorrect alias information CVE-2019-9810 - Mozilla: Ionmonkey type confusion with proto mutations CVE-2019-9813 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20190327)

This update upgrades Firefox to version 60.6.1 ESR. Security Fixes : - Mozilla: IonMonkey MArraySlice has incorrect alias information CVE-2019-9810 - Mozilla: Ionmonkey type confusion with proto mutations CVE-2019-9813 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : openwsman on SL7.x x86_64 (20190326)

Security Fixes : - openwsman: Disclosure of arbitrary files outside of the registered URIs CVE-2019-3816 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid123147; scriptversion"1.4";...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20190321)

Security Fixes : - ghostscript: superexec operator is available 700585 CVE-2019-3835 - ghostscript: forceput in DefineResource is still accessible 700576 CVE-2019-3838 Bug Fixes : - ghostscript: Regression: double comment chars '%%' in gsinit.ps leading to missing metadata C Tenable Network...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20190320)

This update upgrades Firefox to version 60.6.0 ESR. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 CVE-2019-9788 - Mozilla: Use-after-free when removing in-use DOM elements CVE-2019-9790 - Mozilla: Type inference is incorrect for constructors entered throu...

Scientific Linux Security Update : tomcat on SL7.x (x86_64) (20190318)

Security Fixes : - cloud-init: extra ssh keys added to authorizedkeys on the Azure platform CVE-2019-0816 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid122962; scriptversion"1.7";...

Scientific Linux Security Update : cloud-init on SL7.x (x86_64) (20190318)

Security Fixes : - cloud-init: extra ssh keys added to authorizedkeys on the Azure platform CVE-2019-0816 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid122961; scriptversion"1.7";...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20190314)

Security Fixes : - kernel: Memory corruption due to incorrect socket cloning CVE-2018-9568 - kernel: Unprivileged users able to inspect kernel stacks of arbitrary tasks CVE-2018-17972 - kernel: Faulty computation of numberic bounds in the BPF verifier CVE-2018-18445 Bug Fixes and Enhancements : -...

Scientific Linux Security Update : tomcat on SL7.x (noarch) (20190313)

Security Fixes : - tomcat: Open redirect in default servlet CVE-2018-11784 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid122846; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/06/13";...

Scientific Linux Security Update : openssl on SL7.x x86_64 (20190313)

Security Fixes : - openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures PortSmash CVE-2018-5407 Bug Fixes : - Perform the RSA signature self-tests with SHA-256 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : cockpit on SL7.x x86_64 (20190313)

Security Fixes : - cockpit: Crash when parsing invalid base64 headers CVE-2019-3804 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid122844; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : java-1.7.0-openjdk on SL7.x x86_64 (20190305)

Security Fixes : - OpenJDK: memory disclosure in FileChannelImpl Libraries, 8206290 CVE-2019-2422 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid122641; scriptversion"1.4";...

Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64 (20190305)

Security Fixes : - OpenJDK: memory disclosure in FileChannelImpl Libraries, 8206290 CVE-2019-2422 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid122640; scriptversion"1.4";...