Scientific Linux Security Update : squid on SL7.x x86_64 (20200407)

squid: Incorrect pointer handling when processing ESI Responses can lead to denial of service squid: Incorrect pointer handling in HTTP processing and certificate download can lead to denial of service squid: XSS via username or auth parameter in cachemgr.cgi C Tenable Network Security, Inc. The...

Scientific Linux Security Update : qt on SL7.x x86_64 (20200407)

qt5-qtbase: Double free in QXmlStreamReader qt: Malformed PPM image causing division by zero and crash in qppmhandler.cpp qt5-qtsvg: Invalid parsing of malformed url reference resulting in a denial of service qt5-qtbase: QImage allocation failure in qgifhandler qt5-qtimageformats: QTgaFile CPU...

Scientific Linux Security Update : wireshark on SL7.x x86_64 (20200407)

wireshark: Out-of-bounds read in packet-ldss.c wireshark: Multiple dissectors could crash wnpa-sec-2018-36 wireshark: DICOM dissector infinite loop wnpa-sec-2018-39 wireshark: Bazaar dissector infinite loop wnpa-sec-2018-40 wireshark: SIGCOMP dissector crash in packet-sigcomp.c wireshark: Radiota...

Scientific Linux Security Update : libqb on SL7.x x86_64 (20200407)

libqb: Insecure treatment of IPC temporary files C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135816; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : poppler and evince on SL7.x x86_64 (20200407)

poppler: integer overflow in Parser::makeStream in Parser.cc poppler: heap-based buffer over-read in function PSOutputDev::checkPageSlice in PSOutputDev.cc poppler: heap-based buffer over-read in JPXStream::init in JPEG2000Stream.cc poppler: integer overflow in JPXStream::init function leading to...

Scientific Linux Security Update : samba on SL7.x x86_64 (20200407)

samba: Combination of parameters and permissions can allow user to escape from the share path definition samba: smb client vulnerable to filenames containing path separators C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : file on SL7.x x86_64 (20200407)

file: out-of-bounds read via a crafted ELF file C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135809; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15"; scriptcveid"CVE-2018-10360...

Scientific Linux Security Update : okular on SL7.x x86_64 (20200407)

okular: Directory traversal in function unpackDocumentArchive in core/document.cpp C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135826; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : net-snmp on SL7.x x86_64 (20200407)

net-snmp: NULL pointer exception in snmpoidcompare in snmplib/snmpapi.c resulting in a denial of service C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135825; scriptversion"1.3";...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20200407)

QEMU: Slirp: potential OOB access due to unsafe snprintf usages C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid135833; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/29";...

Scientific Linux Security Update : zziplib on SL7.x x86_64 (20200407)

zziplib: directory traversal in unzzipcat in the bins/unzzipcat-mem.c C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135843; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : python-twisted-web on SL7.x x86_64 (20200407)

python-twisted: Improper neutralization of CRLF characters in URIs and HTTP methods C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135832; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : mutt on SL7.x x86_64 (20200407)

mutt: IMAP header caching path traversal vulnerability C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135823; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : expat on SL7.x x86_64 (20200407)

expat: Integer overflow leading to buffer overflow in XMLGetBuffer C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135808; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : php on SL7.x x86_64 (20200407)

php: Reflected XSS on PHAR 404 page php: Stack-based buffer under-read in phpstreamurlwraphttpex in httpfopenwrapper.c when parsing HTTP response php: Reflected XSS vulnerability on PHAR 403 and 404 error pages php: Out-of-bounds read in base64decodexmlrpc in ext/xmlrpc/libxmlrpc/base64.c C Tenab...

Scientific Linux Security Update : ImageMagick on SL7.x x86_64 (20200407)

ImageMagick: multiple security vulnerabilities C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135797; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15"; scriptcveid...

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20200407)

mysql: Server: Pluggable Auth unspecified vulnerability CPU Jul 2019 mysql: Server: Security: Privileges unspecified vulnerability CPU Jul mysql: Server: XML unspecified vulnerability CPU Jul 2019 mysql: Server: Parser unspecified vulnerability CPU Jul 2019 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : doxygen on SL7.x x86_64 (20200407)

doxygen: cross-site scripting in templates/html/searchopensearch.php C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135806; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : advancecomp on SL7.x x86_64 (20200407)

advancecomp: integer overflow in pngcompress in pngex.cc C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135798; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : telnet on SL7.x x86_64 (20200407)

telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135839; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...