Scientific Linux Security Update : slf4j on SL7.x (noarch) (20180326)

Security Fixes : - slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution CVE-2018-8088 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108645; scriptversion"1.6";...

Scientific Linux Security Update : firefox on SL6.x, SL7.x i386/x86_64 (20180319)

This update upgrades Firefox to version 52.7.2 ESR. Security Fixes : - Mozilla: Vorbis audio processing out of bounds write MFSA 2018-08 CVE-2018-5146 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108481; scriptversion"1.9...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20180315)

This update upgrades Firefox to version 52.7.0 ESR. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 MFSA 2018-07 CVE-2018-5125 - Mozilla: Buffer overflow manipulating SVG animatedPathSegList MFSA 2018-07 CVE-2018-5127 - Mozilla: Out-of-bounds write with...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20180315)

This update upgrades Firefox to version 52.7.0 ESR. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 MFSA 2018-07 CVE-2018-5125 - Mozilla: Buffer overflow manipulating SVG animatedPathSegList MFSA 2018-07 CVE-2018-5127 - Mozilla: Out-of-bounds write with...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20180313)

Security Fixes : - Qemu: cirrus: OOB access issue in mode4and5 write functions CVE-2017-15289 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108366; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : libreoffice on SL6.x i386/x86_64 (20180313)

Security Fixes : - libreoffice: Remote arbitrary file disclosure vulnerability via WEBSERVICE formula CVE-2018-6871 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108365; scriptversion"1.5";...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20180313) (Meltdown) (Spectre)

Security Fixes : - hw: cpu: speculative execution branch target injection s390-only CVE-2017-5715, Important - hw: cpu: speculative execution bounds-check bypass s390 and powerpc CVE-2017-5753, Important - hw: cpu: speculative execution permission faults handling powerpc-only CVE-2017-5754 Bug...

Scientific Linux Security Update : 389-ds-base on SL6.x i386/x86_64 (20180313)

Security Fixes : - 389-ds-base: remote Denial of Service DoS via search filters in SetUnicodeStringFromUTF8 in collate.c CVE-2018-1054 - 389-ds-base: Authentication bypass due to lack of size check in slapictmemcmp function in chmalloc.c CVE-2017-15135 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : mailman on SL6.x i386/x86_64 (20180313)

Security Fixes : - mailman: Cross-site scripting XSS vulnerability in web UI CVE-2018-5950 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108333; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : mailman on SL7.x x86_64 (20180313)

Security Fixes : - mailman: Cross-site scripting XSS vulnerability in web UI CVE-2018-5950 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid108334; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : dhcp on SL7.x x86_64 (20180312)

Security Fixes : - dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server CVE-2018-5732 - dhcp: Reference count overflow in dhcpd allows denial of service CVE-2018-5733 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : dhcp on SL6.x i386/x86_64 (20180308)

Security Fixes : - dhcp: Buffer overflow in dhclient possibly allowing code execution triggered by malicious server CVE-2018-5732 - dhcp: Reference count overflow in dhcpd allows denial of service CVE-2018-5733 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : libreoffice on SL7.x x86_64 (20180306)

Security Fixes : - libreoffice: Remote arbitrary file disclosure vulnerability via WEBSERVICE formula CVE-2018-6871 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid107211; scriptversion"1.5";...

Scientific Linux Security Update : php on SL7.x x86_64 (20180306)

Security Fixes : - php: Buffer over-read from unitialized data in gdImageCreateFromGifCtx function CVE-2017-7890 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid107212; scriptversion"1.4";...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20180306)

Security Fixes : - Kernel: KVM: MMU potential stack buffer overrun during page walks CVE-2017-12188, Important - Kernel: KVM: debug exception via syscall emulation CVE-2017-7518, Moderate C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...

Scientific Linux Security Update : ruby on SL7.x x86_64 (20180228)

Security Fixes : - It was discovered that the Net::FTP module did not properly process filenames in combination with certain operations. A remote attacker could exploit this flaw to execute arbitrary commands by setting up a malicious FTP server and tricking a user or Ruby application into...

Scientific Linux Security Update : gcab on SL7.x x86_64 (20180226)

Security Fixes : - gcab: Extracting malformed .cab files causes stack smashing potentially leading to arbitrary code execution CVE-2018-5345 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid107020; scriptversion"3.4";...

Scientific Linux Security Update : thunderbird on SL6.x, SL7.x i386/x86_64 (20180201)

This update upgrades Thunderbird to version 52.6.0. Security Fixes : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20180131)

Security Fixes : - A race condition was found in systemd. This could result in automount requests not being serviced and processes using them could hang, causing denial of service. CVE-2018-1049 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...

Scientific Linux Security Update : dhcp on SL7.x x86_64 (20180125)

Security Fixes : - It was found that the DHCP daemon did not properly clean up closed OMAPI connections in certain cases. A remote attacker able to connect to the OMAPI port could use this flaw to exhaust file descriptors in the DHCP daemon, leading to a denial of service in the OMAPI...