Scientific Linux Security Update : wpa_supplicant on SL7.x x86_64 (20171018) (KRACK)

Security Fixes : - A new exploitation technique called key reinstallation attacks KRACK affecting WPA2 has been discovered. A remote attacker within Wi-Fi range could exploit these attacks to decrypt Wi-Fi traffic or possibly inject forged Wi-Fi packets by manipulating cryptographic handshakes us...

Scientific Linux Security Update : thunderbird on SL6.x, SL7.x i386/x86_64 (20171012)

This update upgrades Thunderbird to version 52.4.0. Security Fixes : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running...

Scientific Linux Security Update : httpd on SL7.x x86_64 (20171011) (Optionsbleed)

Security Fixes : - A use-after-free flaw was found in the way httpd handled invalid and previously unregistered HTTP methods specified in the Limit directive used in an .htaccess file. A remote attacker could possibly use this flaw to disclose portions of the server memory, or cause httpd child...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20171006)

Security Fixes : - Kernel memory corruption due to a buffer overflow was found in brcmfcfg80211mgmttx function in Linux kernels from v3.9-rc1 to v4.13-rc1. The vulnerability can be triggered by sending a crafted NL80211CMDFRAME packet via netlink. This flaw is unlikely to be triggered remotely as...

Scientific Linux Security Update : postgresql on SL6.x i386/x86_64 (20171005)

Security Fixes : - It was found that authenticating to a PostgreSQL database account with an empty password was possible despite libpq's refusal to send an empty password. A remote attacker could potentially use this flaw to gain access to database accounts with empty passwords. CVE-2017-7546...

Scientific Linux Security Update : dnsmasq on SL6.x i386/x86_64 (20171002)

Security Fixes : - A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. CVE-2017-14491 %NASLMINLEVEL 70300 C Tenable Network...

Scientific Linux Security Update : dnsmasq on SL7.x x86_64 (20171002)

Security Fixes : - A heap buffer overflow was found in dnsmasq in the code responsible for building DNS replies. An attacker could send crafted DNS packets to dnsmasq which would cause it to crash or, potentially, execute arbitrary code. CVE-2017-14491 - A heap buffer overflow was discovered in...

Scientific Linux Security Update : firefox on SL6.x, SL7.x i386/x86_64 (20170929)

This update upgrades Firefox to version 52.4.0 ESR. Security Fixes : - Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox...

Scientific Linux Security Update : nss on SL6.x, SL7.x i386/x86_64 (20170929)

Security Fixes : - A use-after-free flaw was found in the TLS 1.2 implementation in the NSS library when client authentication was used. A malicious client could use this flaw to cause an application compiled against NSS to crash or, potentially, execute arbitrary code with the permission of the...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20170926)

Security Fixes : - A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable PIE, the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially...

Scientific Linux Security Update : samba on SL6.x i386/x86_64 (20170921)

Security Fixes : - A race condition was found in samba server. A malicious samba client could use this flaw to access files and directories in areas of the server file system not exported under the share definitions. CVE-2017-2619 - It was found that samba did not enforce 'SMB signing' when certa...

Scientific Linux Security Update : samba on SL7.x x86_64 (20170921)

Security Fixes : - It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a man- in-the-middle attack and retrieve information in plain-text. CVE-2017-12150 - A flaw was found in the way samba client used encryption wi...

Scientific Linux Security Update : augeas on SL7.x x86_64 (20170921)

Security Fixes : - A vulnerability was discovered in augeas affecting the handling of escaped strings. An attacker could send crafted strings that would cause the application using augeas to copy past the end of a buffer, leading to a crash or possible code execution. CVE-2017-7555 %NASLMINLEVEL...

Scientific Linux Security Update : samba4 on SL6.x i386/x86_64 (20170921)

Security Fixes : - It was found that samba did not enforce 'SMB signing' when certain configuration options were enabled. A remote attacker could launch a man- in-the-middle attack and retrieve information in plain-text. CVE-2017-12150 - An information leak flaw was found in the way SMB1 protocol...

Scientific Linux Security Update : emacs on SL7.x x86_64 (20170919)

Security Fixes : - A command injection flaw within the Emacs 'enriched mode' handling has been discovered. By tricking an unsuspecting user into opening a specially crafted file using Emacs, a remote attacker could exploit this flaw to execute arbitrary commands with the privileges of the Emacs...

Scientific Linux Security Update : postgresql on SL7.x x86_64 (20170914)

The following packages have been upgraded to a later upstream version: postgresql 9.2.23. Security Fixes : - It was found that authenticating to a PostgreSQL database account with an empty password was possible despite libpq's refusal to send an empty password. A remote attacker could potentially...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20170912) (BlueBorne)

Security Fixes : - A stack-based buffer overflow flaw was found in the way the Bluetooth subsystem of the Linux kernel processed pending L2CAP configuration responses from a client. On systems with the stack protection feature enabled in the kernel CONFIGCCSTACKPROTECTOR=y, which is enabled on al...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20170912) (BlueBorne)

Security Fixes : - A stack-based buffer overflow flaw was found in the way the Bluetooth subsystem of the Linux kernel processed pending L2CAP configuration responses from a client. On systems with the stack protection feature enabled in the kernel CONFIGCCSTACKPROTECTOR=y, which is enabled on al...

Scientific Linux Security Update : bluez on SL6.x, SL7.x i386/x86_64 (20170912) (BlueBorne)

Security Fixes : - An information-disclosure flaw was found in the bluetoothd implementation of the Service Discovery Protocol SDP. A specially crafted Bluetooth device could, without prior pairing or user interaction, retrieve portions of the bluetoothd process memory, including potentially...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (20170905)

Security Fixes : - A flaw was found in the way 389-ds-base handled authentication attempts against locked accounts. A remote attacker could potentially use this flaw to continue password brute-forcing attacks against LDAP accounts, thereby bypassing the protection offered by the directory server'...