Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20190228)

Security Fixes : - OpenJDK: memory disclosure in FileChannelImpl Libraries, 8206290 CVE-2019-2422 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid122528; scriptversion"1.4";...

Scientific Linux Security Update : java-11-openjdk on SL7.x x86_64 (20190228)

Security Fixes : - OpenJDK: memory disclosure in FileChannelImpl Libraries, 8206290 CVE-2019-2422 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid122527; scriptversion"1.4";...

Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20190226)

Security Fixes : - OpenJDK: memory disclosure in FileChannelImpl Libraries, 8206290 CVE-2019-2422 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid122466; scriptversion"1.4";...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20190226)

Security Fixes : - kernel: MIDI driver race condition leads to a double-free CVE-2018-10902 Bug Fixes : - Previously backported upstream patch caused a change in the behavior of page fault handler. As a consequence, applications compiled through GNU Compiler Collection GCC version 4.4.7 sometimes...

Scientific Linux Security Update : polkit on SL6.x i386/x86_64 (20190226)

Security Fixes : - polkit: Temporary auth hijacking via PID reuse and non-atomic fork CVE-2019-6133 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid122468; scriptversion"1.6";...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20190221)

Security Fixes : - systemd: Insufficient input validation in busprocessobject resulting in PID 1 crash CVE-2019-6454 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid122392; scriptversion"1.5";...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20190221)

Security Fixes : This update upgrades Firefox to version 60.5.1 ESR. Security Fixes : - chromium-browser, mozilla: Use after free in Skia CVE-2018-18356 mozilla: Integer overflow in Skia CVE-2019-5785 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'...

Scientific Linux Security Update : flatpak on SL7.x x86_64 (20190221)

Security Fixes : - flatpak: potential /proc based sandbox escape CVE-2019-8308 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid122391; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20190219)

This update upgrades Firefox to version 60.5.1 ESR. Security Fixes : - chromium-browser, mozilla: Use after free in Skia CVE-2018-18356 - mozilla: Integer overflow in Skia CVE-2019-5785 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if descriptio...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20190204)

This update upgrades Thunderbird to version 60.5.0. Security Fixes : - Mozilla: Use-after-free parsing HTML5 stream CVE-2018-18500 - Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 CVE-2018-18501 - Mozilla: Privilege escalation through IPC channel messages CVE-2018-18505 -...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20190204)

This update upgrades Thunderbird to version 60.5.0. Security Fixes : - Mozilla: Use-after-free parsing HTML5 stream CVE-2018-18500 - Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 CVE-2018-18501 - Mozilla: Privilege escalation through IPC channel messages CVE-2018-18505 -...

Scientific Linux Security Update : spice on SL7.x x86_64 (20190131)

Security Fixes : - spice: Off-by-one error in array access in spice/server/memslot.c CVE-2019-3813 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid121534; scriptversion"1.5";...

Scientific Linux Security Update : polkit on SL7.x x86_64 (20190131)

Security Fixes : - polkit: Temporary auth hijacking via PID reuse and non-atomic fork CVE-2019-6133 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid121533; scriptversion"1.7";...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20190131)

Security Fixes : - ghostscript: use-after-free in copydevice handling 699661 CVE-2018-16540 - ghostscript: access bypass in psi/zdevice2.c 700153 CVE-2018-19475 - ghostscript: access bypass in psi/zicc.c 700169 CVE-2018-19476 - ghostscript: access bypass in psi/zfjbig2.c 700168 CVE-2018-19477 -...

Scientific Linux Security Update : spice-server on SL6.x x86_64 (20190131)

Security Fixes : - spice: Off-by-one error in array access in spice/server/memslot.c CVE-2019-3813 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid121535; scriptversion"1.5";...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20190130)

This update upgrades Firefox to version 60.5.0 ESR. Security Fixes : - Mozilla: Use-after-free parsing HTML5 stream CVE-2018-18500 - Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 CVE-2018-18501 - Mozilla: Privilege escalation through IPC channel messages CVE-2018-18505 C...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20190130)

This update upgrades Firefox to version 60.5.0 ESR. Security Fixes : - Mozilla: Use-after-free parsing HTML5 stream CVE-2018-18500 - Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 CVE-2018-18501 - Mozilla: Privilege escalation through IPC channel messages CVE-2018-18505 C...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20190129)

Security Fixes : - systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864 CVE-2019-3815 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid121457; scriptversion"1.6";...

Scientific Linux Security Update : bind on SL7.x x86_64 (20190129)

Security Fixes : - bind: Crash from assertion error when debug log level is 10 and log entries meet buffer boundary CVE-2018-5742 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid121455; scriptversion"1.5";...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20190129)

Security Fixes : - kernel: Use-after-free due to race condition in AFPACKET implementation CVE-2018-18559 - kernel: userfaultfd bypasses tmpfs file permissions CVE-2018-18397 Bug Fixes : See the descriptions in the related Knowledge Article : C Tenable Network Security, Inc. The descriptive text ...