Scientific Linux Security Update : cloud-init on SL7.x x86_64 (20201001)

Security Fixes : - cloud-init: Use of random.choice when generating random password CVE-2020-8631 - cloud-init: Too short random password length in ccsetpassword in config/ccsetpasswords.py CVE-2020-8632 - cloud-init: default configuration disabled deletion of SSH host keys CVE-2018-10896 C Tenab...

Scientific Linux Security Update : libsndfile on SL7.x x86_64 (20201001)

Security Fixes : - libsndfile: buffer over-read in the function i2alawarray in alaw.c CVE-2018-19662 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141650; scriptversion"1.3";...

Scientific Linux Security Update : libwmf on SL7.x x86_64 (20201001)

Security Fixes : - gd: double free in the gdImagePtr in gdgifout.c, gdjpeg.c, and gdwbmp.c CVE-2019-6978 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141688; scriptversion"1.3";...

Scientific Linux Security Update : libvirt on SL7.x x86_64 (20201001)

Security Fixes : - libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent CVE-2019-20485 - libvirt: Potential denial of service via active pool without target path CVE-2020-10703 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : e2fsprogs on SL7.x x86_64 (20201001)

Security Fixes : - e2fsprogs: Crafted ext4 partition leads to out-of-bounds write CVE-2019-5094 - e2fsprogs: Out-of-bounds write in e2fsck/rehash.c CVE-2019-5188 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141754;...

Scientific Linux Security Update : openwsman on SL7.x x86_64 (20201001)

Security Fixes : - openwsman: Infinite loop in processconnection allows denial of service CVE-2019-3833 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141728; scriptversion"1.3";...

Scientific Linux Security Update : qt5-qtbase on SL7.x x86_64 (20201001)

Security Fixes : - qt: files placed by attacker can influence the working directory and lead to malicious code execution CVE-2020-0569 - qt: files placed by attacker can influence the working directory and lead to malicious code execution CVE-2020-0570 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20201001)

Security Fixes : - mysql: Server: Optimizer unspecified vulnerability CPU Oct 2019 CVE-2019-2974 - mysql: C API unspecified vulnerability CPU Apr 2020 CVE-2020-2752 - mysql: Server: DML unspecified vulnerability CPU Apr 2020 CVE-2020-2780 - mysql: Server: Stored Procedure unspecified vulnerabilit...

Scientific Linux Security Update : freeradius on SL7.x x86_64 (20201001)

Security Fixes : - freeradius: privilege escalation due to insecure logrotate configuration CVE-2019-10143 - freeradius: eap-pwd: Information leak due to aborting when needing more than 10 iterations CVE-2019-13456 - freeradius: eap-pwd: DoS issues due to multithreaded BNCTX access CVE-2019-17185...

Scientific Linux Security Update : subversion on SL7.x x86_64 (20201001)

Security Fixes : - subversion: remotely triggerable DoS vulnerability in svnserve 'get-deleted-rev' CVE-2018-11782 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141704; scriptversion"1.3";...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20201001)

Security Fixes : - systemd: memory leak in buttonopen in login/logind-button.c when udev events are received CVE-2019-20386 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141716; scriptversion"1.3";...

Scientific Linux Security Update : curl on SL7.x x86_64 (20201001)

Security Fixes : - curl: heap buffer overflow in function tftpreceivepacket CVE-2019-5482 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141681; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : tomcat on SL7.x x86_64 (20201001)

Security Fixes : - tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS CVE-2020-13935 - tomcat: session fixation when using FORM authentication CVE-2019-17563 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc';...

Scientific Linux Security Update : libssh2 on SL7.x x86_64 (20201001)

Security Fixes : - libssh2: integer overflow in SSHMSGDISCONNECT logic in packet.c CVE-2019-17498 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141667; scriptversion"1.3";...

Scientific Linux Security Update : nss and nspr on SL7.x x86_64 (20201001)

Security Fixes : - nss: Out-of-bounds read when importing curve25519 private key CVE-2019-11719 - nss: Use-after-free in sftkFreeSession due to improper refcounting CVE-2019-11756 - nss: Check length of inputs for cryptographic primitives CVE-2019-17006 - nss: Side channel attack on ECDSA signatu...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20201001)

Security Fixes : - QEMU: usb: out-of-bounds r/w access issue while processing usb packets CVE-2020-14364 - QEMU: slirp: use-after-free in ipreass function in ipinput.c CVE-2020-1983 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : evince and poppler on SL7.x x86_64 (20201001)

Security Fixes : - poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc CVE-2019-14494 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141747; scriptversion"1.3";...

Scientific Linux Security Update : okular on SL7.x x86_64 (20201001)

Security Fixes : - okular: local binary execution via specially crafted PDF files CVE-2020-9359 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141744; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate"...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20201001)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3 CVE-2020-15673 - Mozilla: XSS when pasting attacker-controlled data into a contenteditable element CVE-2020-15676 - Mozilla: Download origin spoofing via redirect CVE-2020-15677 - Mozilla: When recursing throu...

Scientific Linux Security Update : python on SL7.x x86_64 (20201001)

Security Fixes : - python: XSS vulnerability in the documentation XML-RPC server in servertitle field CVE-2019-16935 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141713; scriptversion"1.3";...