Scientific Linux Security Update : ksh on SL7.x x86_64 (20200224)

Security Fixes : ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection CVE-2019-14868 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid134069; scriptversion"1.4";...

Scientific Linux Security Update : python-pillow on SL7.x x86_64 (20200224)

Security Fixes : python-pillow: improperly restricted operations on memory buffer in libImaging/PcxDecode.c CVE-2020-5312 python-pillow: reading specially crafted image files leads to allocation of large amounts of memory and denial of service CVE-2019-16865 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200224)

Security Fixes : Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 CVE-2020-6800 Mozilla: Out-of-bounds read when processing certain email messages CVE-2020-6793 Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200224)

Security Fixes : Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 CVE-2020-6800 Mozilla: Out-of-bounds read when processing certain email messages CVE-2020-6793 Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords...

Friday Squid Blogging: 13-foot Giant Squid Caught off New Zealand Coast

It's probably a juvenile: Researchers aboard the New Zealand-based National Institute of Water and Atmospheric Research Ltd NIWA research vessel Tangaroa were on an expedition to survey hoki, New Zealand's most valuable commercial fish, in the Chatham Rise ­ an area of ocean floor to the east of...

Scientific Linux Security Update : sudo on SL7.x x86_64 (20200218)

Security Fixes : - sudo: Stack based buffer overflow when pwfeedback is enabled CVE-2019-18634 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133789; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : java-1.7.0-openjdk on SL7.x x86_64 (20200218)

Security Fixes : - OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS Security, 8229951 CVE-2020-2601 - OpenJDK: Serialization filter changes via jdk.serialFilter property modification Serialization, 8231422 CVE-2020-2604 - OpenJDK: Improper checks of SASL message properties in GssKrb5Base...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20200217)

Security Fixes : - Mozilla: Missing bounds check on shared memory read in the parent process CVE-2020-6796 - Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 CVE-2020-6800 - Mozilla: Incorrect parsing of template tag could result in JavaScript injection CVE-2020-6798 C Tenable...

Scientific Linux Security Update : ksh on SL6.x i386/x86_64 (20200217)

Security Fixes : - ksh: certain environment variables interpreted as arithmetic expressions on startup, leading to code injection CVE-2019-14868 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133756; scriptversion"1.5";...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200217)

Security Fixes : - Mozilla: Missing bounds check on shared memory read in the parent process CVE-2020-6796 - Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 CVE-2020-6800 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if...

Scientific Linux Security Update : spice-gtk on SL6.x i386/x86_64 (20200211)

Security Fixes : - spice-client: Insufficient encoding checks for LZ can cause different integer/buffer overflows CVE-2018-10893 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133641; scriptversion"1.4";...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20200205)

Security Fixes : - kernel: heap overflow in mwifiexupdatevsie function of Marvell WiFi driver CVE-2019-14816 - kernel: heap-based buffer overflow in mwifiexprocesscountryie function in drivers/net/wireless/marvell/mwifiex/staioctl.c CVE-2019-14895 - kernel: heap overflow in marvell/mwifiex/tdls.c...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20200205)

Security Fixes : - hw: TSX Transaction Asynchronous Abort TAA CVE-2019-11135 - QEMU: slirp: heap buffer overflow during packet reassembly CVE-2019-14378 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133518;...

Scientific Linux Security Update : ipa on SL7.x x86_64 (20200205)

Security Fixes : - ipa: Denial of service in IPA server due to wrong use of berscanf CVE-2019-14867 - ipa: Batch API logging user passwords to /var/log/httpd/errorlog CVE-2019-10195 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : git on SL6.x i386/x86_64 (20200203)

Security Fixes : - git: arbitrary code execution via .gitmodules CVE-2018-17456 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133447; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : openjpeg2 on SL7.x x86_64 (20200128)

Security Fixes : - openjpeg: Heap-based buffer overflow in opjt1clbldecodeprocessor CVE-2020-6851 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133388; scriptversion"1.4";...

Scientific Linux Security Update : sqlite on SL7.x x86_64 (20200127)

Security Fixes : - sqlite: fts3: improve shadow table corruption detection CVE-2019-13734 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133339; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : apache-commons-beanutils on SL7.x (noarch) (20200121)

Security Fixes : - apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default CVE-2019-10086 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133192; scriptversion"1.6";...

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20200122)

Security Fixes : - OpenJDK: Use of unsafe RSA-MD5 checkum in Kerberos TGS Security, 8229951 CVE-2020-2601 - OpenJDK: Serialization filter changes via jdk.serialFilter property modification Serialization, 8231422 CVE-2020-2604 - OpenJDK: Improper checks of SASL message properties in GssKrb5Base...

Scientific Linux Security Update : python-reportlab on SL7.x x86_64 (20200122)

Security Fixes : - python-reportlab: code injection in colors.py allows attacker to execute code CVE-2019-17626 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid133197; scriptversion"1.4";...