Scientific Linux Security Update : xterm on SL7.x x86_64 (2021:0617)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0617-1 advisory. - xterm: crash when processing combining characters CVE-2021-27135 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:0661)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0661-1 advisory. - Mozilla: Content Security Policy violation report could have contained the destination of a redirect CVE-2021-23968, CVE-2021-23969 - Mozilla:...

Fedora: Security Advisory for gnome-calculator (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Scientific Linux Security Update : wpa_supplicant on SL7.x x86_64 (2021:0808)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0808-1 advisory. - wpasupplicant: Use-after-free in P2P provision discovery processing CVE-2021-27803 Note that Nessus has not tested for this issue but has instead relied...

Scientific Linux Security Update : screen on SL7.x x86_64 (2021:0742)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0742-1 advisory. - screen: crash when processing combining chars CVE-2021-26937 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : grub2 on SL7.x x86_64 (2021:0699)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0699-1 advisory. - grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled CVE-2020-14372 - grub2: Use-after-free in...

Scientific Linux Security Update : bind on SL7.x i686/x86_64 (2021:0671)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0671-1 advisory. - bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation CVE-2020-8625 Note that Nessus has not tested for this...

Scientific Linux Security Update : flatpak on SL7.x x86_64 (2021:0411)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0411-1 advisory. - flatpak: sandbox escape via spawn portal CVE-2021-21261 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2021:0336)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0336-1 advisory. - kernel: use-after-free in fs/blockdev.c CVE-2020-15436 - kernel: Nfsd failure to clear umask after processing an open or create CVE-2020-35513...

Scientific Linux Security Update : linux-firmware on SL7.x (noarch) (2021:0339)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0339-1 advisory. - hardware: buffer overflow in bluetooth firmware CVE-2020-12321 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : perl on SL7.x i686/x86_64 (2021:0343)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0343-1 advisory. - perl: heap-based buffer overflow in regular expression compiler leads to DoS CVE-2020-10543 - perl: corruption of intermediate language state o...

Scientific Linux Security Update : glibc on SL7.x i686/x86_64 (2021:0348)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0348-1 advisory. - glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding CVE-2019-25013 - glibc: stack...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:0297)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0297-1 advisory. - Mozilla: Cross-origin information leakage via redirected PDF requests CVE-2021-23953 - Mozilla: Type confusion when using logical assignment...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2021:0290)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0290-1 advisory. - Mozilla: Cross-origin information leakage via redirected PDF requests CVE-2021-23953 - Mozilla: Type confusion when using logical assignment...

Scientific Linux Security Update : dnsmasq on SL7.x x86_64 (2021:0153)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0153-1 advisory. - dnsmasq: loose address/port check in replyquery makes forging replies easier for an off-path attacker CVE-2020-25684 - dnsmasq: loose query nam...

Scientific Linux Security Update : xstream on SL7.x (noarch) (2021:0162)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0162-1 advisory. - XStream: remote code execution due to insecure XML deserialization when relying on blocklists CVE-2020-26217 Note that Nessus has not tested for this...

Scientific Linux Security Update : sudo on SL7.x i686/x86_64 (2021:0221)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0221-1 advisory. - sudo: Heap buffer overflow in argument parsing CVE-2021-3156 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:0087)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0087-1 advisory. - Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk CVE-2020-16044 Note that Nessus has not tested for this issue but has...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2021:0053)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0053-1 advisory. - Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk CVE-2020-16044 Note that Nessus has not tested for this issue but has...

Scientific Linux Security Update : ImageMagick on SL7.x i686/x86_64 (2021:0024)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:0024-1 advisory. - ImageMagick: Shell injection via PDF password could result in arbitrary code execution CVE-2020-29599 Note that Nessus has not tested for this issue but...