Scientific Linux Security Update : httpd on SL7.x x86_64 (20200407)

httpd: modsessioncookie does not respect expiry time httpd: Out of bounds write in modauthnzldap when using too small Accept-Language values httpd: Out of bounds access after failure in reading the HTTP request C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : libsndfile on SL7.x x86_64 (20200407)

libsndfile: stack-based buffer overflow in sndfile-deinterleave utility C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135818; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : bind on SL7.x x86_64 (20200407)

bind: TCP Pipelining doesn't limit TCP clients on a single connection bind: An assertion failure if a trust anchor rolls over to an unsupported key algorithm when using managed-keys bind: Controls for zone transfers may not be properly applied to DLZs if the zones are writable C Tenable Network...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20200407)

kernel: out of bound read in DVB connexant driver. kernel: Missing permissions check for requestkey destination allows local attackers to add keys to keyring without Write permission kernel: denial of service via ioctl call in network tun handling kernel: usb: missing size check in the...

Scientific Linux Security Update : unzip on SL7.x x86_64 (20200407)

unzip: overlapping of files in ZIP container leads to denial of service C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid135841; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/29";...

Scientific Linux Security Update : python3 on SL7.x x86_64 (20200407)

python: Cookie domain check returns incorrect results python: email.utils.parseaddr wrongly parses email addresses C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135830; scriptversion"1.3";...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200416)

Security Fixes : - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 - Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6821 - Mozilla: Memory safety...

Scientific Linux Security Update : avahi on SL7.x x86_64 (20200407)

avahi: Multicast DNS responds to unicast queries outside of local network C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135799; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : libreoffice on SL7.x x86_64 (20200407)

libreoffice: LibreLogo script can be manipulated into executing arbitrary python commands libreoffice: Insufficient URL validation allowing LibreLogo script execution libreoffice: LibreLogo global-event script execution libreoffice: Insufficient URL encoding flaw in allowed script location check...

Scientific Linux Security Update : curl on SL7.x x86_64 (20200407)

curl: TFTP receive heap buffer overflow in tftpreceivepacket function C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135804; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15";...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200416)

Security Fixes : - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 - Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6821 - Mozilla: Memory safety...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200414)

Security Fixes : - Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method CVE-2020-6821 - Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7 CVE-2020-6825 - Mozilla: Out of bounds write in GMPDecodeData when processing large images CVE-2020-6822 ...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20200408)

Security Fixes : - QEMU: Slirp: potential OOB access due to unsafe snprintf usages Bug Fixes : - QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. rhel-6 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid135382;...

Scientific Linux Security Update : krb5-appl on SL6.x i386/x86_64 (20200407)

Security Fixes : - telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code CVE-2020-10188 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135279; scriptversion"1.6";...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200407)

Security Fixes : - Mozilla: Use-after-free while running the nsDocShell destructor CVE-2020-6819 - Mozilla: Use-after-free when handling a ReadableStream CVE-2020-6820 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid135278;...

Scientific Linux Security Update : ipmitool on SL6.x i386/x86_64 (20200406)

Security Fixes : - ipmitool: Buffer overflow in readfruareasection function in lib/ipmifru.c CVE-2020-5208 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135261; scriptversion"1.4";...

Scientific Linux Security Update : telnet on SL6.x i386/x86_64 (20200406)

Security Fixes : - telnet-server: no bounds checks in nextitem function allows to remotely execute arbitrary code CVE-2020-10188 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135262; scriptversion"1.6";...

Scientific Linux Security Update : ipmitool on SL7.x x86_64 (20200327)

Security Fixes : - ipmitool: Buffer overflow in readfruareasection function in lib/ipmifru.c CVE-2020-5208 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135002; scriptversion"1.4";...

Scientific Linux Security Update : tomcat6 on SL6.x (noarch) (20200323)

Security Fixes : - tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability CVE-2020-1938 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid134849; scriptversion"1.8";...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200323)

Security Fixes : - Mozilla: Use-after-free when removing data about origins CVE-2020-6805 - Mozilla: BodyStream::OnInputStreamReady was missing protections against state confusion CVE-2020-6806 - Mozilla: Use-after-free in cubeb during stream destruction CVE-2020-6807 - Mozilla: Memory safety bug...