Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2020:5561)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5561-1 advisory. - chromium-browser: Uninitialized Use in V8 CVE-2020-16042 - Mozilla: Heap buffer overflow in WebGL CVE-2020-26971 - Mozilla: CSS Sanitizer...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2020:5618)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5618-1 advisory. - chromium-browser: Uninitialized Use in V8 CVE-2020-16042 - Mozilla: Heap buffer overflow in WebGL CVE-2020-26971 - Mozilla: CSS Sanitizer...

Scientific Linux Security Update : openssl on SL7.x i686/x86_64 (2020:5566)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5566-1 advisory. - openssl: EDIPARTYNAME NULL pointer de-reference CVE-2020-1971 Note that Nessus has not tested for this issue but has instead relied only on the...

Scientific Linux Security Update : gd on SL7.x i686/x86_64 (2020:5443)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5443-1 advisory. - gd: Integer overflow in gd2GetHeader resulting in heap overflow CVE-2016-5766 Note that Nessus has not tested for this issue but has instead relied only...

Scientific Linux Security Update : targetcli on SL7.x (noarch) (2020:5434)

The remote Scientific Linux 7 host has a package installed that is affected by a vulnerability as referenced in the SLSA-2020:5434-1 advisory. - targetcli: weak permissions for /etc/target and backup files CVE-2020-13867 Note that Nessus has not tested for this issue but has instead relied only o...

Scientific Linux Security Update : pacemaker on SL7.x i686/x86_64 (2020:5453)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5453-1 advisory. - pacemaker: ACL restrictions bypass CVE-2020-25654 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Scientific Linux Security Update : python-rtslib on SL7.x (noarch) (2020:5435)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5435-1 advisory. - python-rtslib: weak permissions for /etc/target/saveconfig.json CVE-2020-14019 Note that Nessus has not tested for this issue but has instead relied onl...

Scientific Linux Security Update : libexif on SL7.x i686/x86_64 (2020:5402)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5402-1 advisory. - libexif: out of bounds write due to an integer overflow in exif-entry.c CVE-2020-0452 Note that Nessus has not tested for this issue but has instead...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2020:5400)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5400-1 advisory. - Mozilla: Stack overflow due to incorrect parsing of SMTP server response codes CVE-2020-26970 Note that Nessus has not tested for this issue but has...

Scientific Linux Security Update : kernel on SL7.x x86_64 (2020:5437)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5437-1 advisory. - kernel: metadata validator in XFS may cause an inode with a valid, user-creatable extended attribute to be flagged as corrupt CVE-2020-14385 -...

Scientific Linux Security Update : samba on SL7.x i686/x86_64 (2020:5439)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5439-1 advisory. - samba: Netlogon elevation of privilege vulnerability Zerologon CVE-2020-1472 - samba: Missing handle permissions check in SMB1/2/3 ChangeNotify...

Scientific Linux Security Update : xorg-x11-server on SL7.x i686/x86_64 (2020:5408)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5408-1 advisory. - xorg-x11-server: Out-of-bounds access in XkbSetMap function CVE-2020-14360 - xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow...

Scientific Linux Security Update : net-snmp on SL7.x i686/x86_64 (2020:5350)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5350-1 advisory. - net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution CVE-2020-15862 Note that Nessus has not tested for this...

PT-2020-7011 · Gnu +5 · Gsl +5

Name of the Vulnerable Software and Affected Versions: GSL GNU Scientific Library versions 2.5 and 2.6 Description: A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL. Processing a maliciously crafted input data for gsl stats quantile from sorted...

Scientific Linux Security Update : firefox on SL6.x i686/x86_64 (2020:5257)

The remote Scientific Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the SLSA-2020:5257-1 advisory. - Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code CVE-2020-26951 - Mozilla: Memory safety bugs...

Scientific Linux Security Update : thunderbird on SL6.x i686/x86_64 (2020:5238)

The remote Scientific Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5238-1 advisory. - Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code CVE-2020-26951 - Mozilla: Memory safety bugs...

Scientific Linux Security Update : firefox on SL7.x x86_64 (2020:5239)

The remote Scientific Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the SLSA-2020:5239-1 advisory. - Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code CVE-2020-26951 - Mozilla: Memory safety bugs...

Scientific Linux Security Update : thunderbird on SL7.x i686/x86_64 (2020:5235)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2020:5235-1 advisory. - Mozilla: Parsing mismatches could confuse and bypass security sanitizer for chrome privileged code CVE-2020-26951 - Mozilla: Memory safety bugs...

Scientific Linux Security Update : thunderbird on SL6.x i686/x86_64 (2020:5164)

The remote Scientific Linux 6 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5164-1 advisory. - Mozilla: Write side effects in MCallGetProperty opcode not accounted for CVE-2020-26950 Note that Nessus has not tested for this issue but has instead...

Scientific Linux Security Update : net-snmp on SL6.x i686/x86_64 (2020:5129)

The remote Scientific Linux 6 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2020:5129-1 advisory. - net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution CVE-2020-15862 Note that Nessus has not tested for this...