Scientific Linux Security Update : samba on SL7.x x86_64 (20201001)

Security Fixes : - samba: Crash after failed character conversion at log level 3 or above CVE-2019-14907 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141648; scriptversion"1.3";...

Scientific Linux Security Update : cpio on SL7.x x86_64 (20201001)

Security Fixes : - cpio: improper input validation when writing tar header fields leads to unexpect tar generation CVE-2019-14866 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141753; scriptversion"1.3";...

Scientific Linux Security Update : webkitgtk4 on SL7.x x86_64 (20201001)

Security Fixes : - webkitgtk: Multiple security issues CVE-2019-6237, CVE-2019-6251, CVE-2019-8506, CVE-2019-8524, CVE-2019-8535, CVE-2019-8536, CVE-2019-8544, CVE-2019-8551, CVE-2019-8558, CVE-2019-8559, CVE-2019-8563, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587,...

Scientific Linux Security Update : dnsmasq on SL7.x x86_64 (20201001)

Security Fixes : - dnsmasq: memory leak in the createhelper function in /src/helper.c CVE-2019-14834 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141690; scriptversion"1.3";...

Scientific Linux Security Update : dbus on SL7.x x86_64 (20201001)

Security Fixes : - dbus: DBusServer DBUSCOOKIESHA1 authentication bypass CVE-2019-12749 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141677; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : libxml2 on SL7.x x86_64 (20201001)

Security Fixes : - libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c CVE-2019-19956 - libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c CVE-2019-20388 - libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations CVE-2020-7595 C Tenable Network...

Scientific Linux Security Update : libexif on SL7.x x86_64 (20201001)

Security Fixes : - libexif: out of bound write in exif-data.c CVE-2019-9278 - libexif: out of bounds read due to a missing bounds check in exifdatasavedataentry function in exif-data.c CVE-2020-0093 - libexif: use of uninitialized memory in EXIF Makernote handling can lead to crashes and...

Scientific Linux Security Update : libmspack on SL7.x x86_64 (20201001)

Security Fixes : - libmspack: buffer overflow in function chmdreadheaders CVE-2019-1010305 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141694; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : NetworkManager on SL7.x x86_64 (20201001)

Security Fixes : - NetworkManager: user configuration not honoured leaving the connection unauthenticated via insecure defaults CVE-2020-10754 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141710; scriptversion"1.3";...

Scientific Linux Security Update : libvpx on SL7.x x86_64 (20201001)

Security Fixes : - libvpx: Denial of service in mediaserver CVE-2017-0393 - libvpx: Out of bounds read in vp8norm table CVE-2019-9232 - libvpx: Use-after-free in vp8deblock in vp8/common/postproc.c CVE-2019-9433 - libvpx: Out of bounds read in vp8decodeframe in decodeframe.c CVE-2020-0034 C Tenab...

Scientific Linux Security Update : httpd on SL7.x x86_64 (20201001)

Security Fixes : - httpd: Improper handling of headers in modsession can allow a remote user to modify session data for CGI applications CVE-2018-1283 - httpd: Out of bounds read in modcachesocache can allow a remote attacker to cause DoS CVE-2018-1303 - httpd: modrewrite configurations vulnerabl...

Scientific Linux Security Update : bluez on SL7.x x86_64 (20201001)

Security Fixes : - bluez: Improper access control in subsystem could result in privilege escalation and DoS CVE-2020-0556 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141686; scriptversion"1.3";...

Scientific Linux Security Update : cups on SL7.x x86_64 (20201001)

Security Fixes : - cups: DNS rebinding attacks via incorrect whitelist CVE-2017-18190 - cups: stack-buffer-overflow in libcups's asn1gettype function CVE-2019-8675 - cups: stack-buffer-overflow in libcups's asn1getpacked function CVE-2019-8696 C Tenable Network Security, Inc. The descriptive text...

Scientific Linux Security Update : glib2 and ibus on SL7.x x86_64 (20201001)

Security Fixes : - glib2: filecopyfallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress CVE-2019-12450 - ibus: missing authorization allows local attacker to access the input bus of another user CVE-2019-14822 C Tenable Network...

Scientific Linux Security Update : SDL on SL7.x x86_64 (20201001)

Security Fixes : - SDL: buffer over-read in IMAADPCMnibble in audio/SDLwave.c CVE-2019-7572 - SDL: heap-based buffer overflow in function MSADPCMdecode in audio/SDLwave.c CVE-2019-7575 - SDL: heap-based buffer over-read in SDLGetRGB in video/SDLpixels.c CVE-2019-7636 - SDL: heap-based buffer...

Scientific Linux Security Update : librabbitmq on SL7.x x86_64 (20201001)

Security Fixes : - librabbitmq: integer overflow in amqphandleinput in amqpconnection.c leads to heap-based buffer overflow CVE-2019-18609 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141652; scriptversion"1.3";...

Scientific Linux Security Update : squid on SL7.x x86_64 (20201001)

Security Fixes : - squid: HTTP Request Smuggling could result in cache poisoning CVE-2020-15810 - squid: HTTP Request Splitting could result in cache poisoning CVE-2020-15811 - squid: Information Disclosure issue in FTP Gateway CVE-2019-12528 - squid: Improper input validation issues in HTTP...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20201020)

Security Fixes : - kernel: net: bluetooth: type confusion while processing AMP packets CVE-2020-12351 - kernel: net: bluetooth: information leak when processing certain AMP packets CVE-2020-12352 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...

Scientific Linux Security Update : exiv2 on SL7.x x86_64 (20201001)

Security Fixes : - exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check CVE-2019-17402 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141707; scriptversion"1.3";...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20201001)

Security Fixes : - systemd: memory leak in buttonopen in login/logind-button.c when udev events are received CVE-2019-20386 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141716; scriptversion"1.3";...