Scientific Linux Security Update : mariadb on SL7.x x86_64 (20180816)

The following packages have been upgraded to a later upstream version: mariadb 5.5.60. Security Fixes : - mysql: Client programs unspecified vulnerability CPU Jul 2017 CVE-2017-3636 - mysql: Server: DML unspecified vulnerability CPU Jul 2017 CVE-2017-3641 - mysql: Client mysqldump unspecified...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20180816)

Security Fixes : - QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams CVE-2018-11806 - QEMU: i386: multiboot OOB access while loading kernel image CVE-2018-7550 Bug Fixes : - Previously, live migrating a Windows guest in some cases caused the guest to become unresponsive...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20180814) (Foreshadow)

Security Fixes : - Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20180814) (Foreshadow)

Security Fixes : - Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented...

Scientific Linux Security Update : openslp on SL6.x i386/x86_64 (20180802)

Security Fixes : - openslp: Heap memory corruption in slpd/slpdprocess.c allows denial of service or potentially code execution CVE-2017-17833 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111523; scriptversion"1.5";...

Scientific Linux Security Update : yum-utils on SL6.x (noarch) (20180730)

Security Fixes : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111496; scriptversion"1.5";...

Scientific Linux Security Update : yum-utils on SL7.x (noarch) (20180730)

Security Fixes : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111497; scriptversion"1.5";...

Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64 (20180730)

Security Fixes : - OpenJDK: insufficient index validation in PatternSyntaxException getMessage Concurrency, 8199547 CVE-2018-2952 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111494; scriptversion"1.5";...

Scientific Linux Security Update : java-1.7.0-openjdk on SL7.x x86_64 (20180730)

Security Fixes : - OpenJDK: insufficient index validation in PatternSyntaxException getMessage Concurrency, 8199547 CVE-2018-2952 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111495; scriptversion"1.5";...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20180725)

This update upgrades Thunderbird to version 52.9.1. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 CVE-2018-5188 - Mozilla: Buffer overflow using computed size of canvas element CVE-2018-12359 - Mozilla: Use-after-free using focus...

Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20180723)

Security Fixes : - OpenJDK: insufficient index validation in PatternSyntaxException getMessage Concurrency, 8199547 CVE-2018-2952 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111258; scriptversion"1.6";...

Scientific Linux Security Update : openslp on SL7.x x86_64 (20180723)

Security Fixes : - openslp: Heap memory corruption in slpd/slpdprocess.c allows denial of service or potentially code execution CVE-2017-17833 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111260; scriptversion"1.5";...

Scientific Linux Security Update : gnupg2 on SL7.x x86_64 (20180712)

Security Fixes : - gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification CVE-2018-12020 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111113;...

Scientific Linux Security Update : gnupg2 on SL6.x i386/x86_64 (20180712)

Security Fixes : - gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification CVE-2018-12020 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111050;...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20180710) (Spectre)

Security Fixes : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20180628)

This update upgrades Firefox to version 60.1.0 ESR. Many older firefox extensions must be updated to work with this new release. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 CVE-2018-5188 - Mozilla: Buffer overflow using computed size ...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20180628)

This update upgrades Firefox to version 60.1.0 ESR. Many older firefox extensions must be updated to work with this new release. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 CVE-2018-5188 - Mozilla: Buffer overflow using computed size ...

Scientific Linux Security Update : python on SL7.x x86_64 (20180703)

Security Fixes : - A flaw was found in the way the DES/3DES cipher was used as part of the TLS/SSL protocol. A man-in-the-middle attacker could use this flaw to recover some plaintext data by capturing large amounts of encrypted traffic between TLS/SSL server and client if the communication used ...

Scientific Linux Security Update : zsh on SL6.x i386/x86_64 (20180619)

Security Fixes : - zsh: Stack-based buffer overflow in genmatchesfiles at compctl.c CVE-2018-1083 - zsh: buffer overflow when scanning very long directory paths for symbolic links CVE-2014-10072 - zsh: buffer overrun in symlinks CVE-2017-18206 - zsh: buffer overflow in utils.c:checkmailpath can...

Scientific Linux Security Update : samba on SL6.x i386/x86_64 (20180619)

Security Fixes : - samba: NULL pointer indirection in printer server process CVE-2018-1050 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid110891; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...