Scientific Linux Security Update : fence-agents on SL7.x x86_64 (20190806)

fence-agents: mis-handling of non-ASCII characters in guest comment fields CVE-2019-10153 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128217; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : procps-ng on SL7.x x86_64 (20190806)

Security Fixes : - procps-ng, procps: Local privilege escalation in top CVE-2018-1122 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128253; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : udisks2 on SL7.x x86_64 (20190806)

Security Fixes : - udisks: Format string vulnerability in udiskslog in udiskslogging.c CVE-2018-17336 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128267; scriptversion"1.4";...

Scientific Linux Security Update : poppler on SL7.x x86_64 (20190806)

Security Fixes : - poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc CVE-2019-7310 - poppler: heap-based buffer overflow in function ImageStream::getLine in Stream.cc CVE-2019-9200 - poppler: infinite recursion in Parser::getObj function in Parser.cc CVE-2018-16646 - poppler: memo...

Scientific Linux Security Update : httpd on SL7.x x86_64 (20190806)

Security Fixes : - httpd: modauthdigest: access control bypass due to race condition CVE-2019-0217 - httpd: URL normalization inconsistency CVE-2019-0220 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128223;...

Scientific Linux Security Update : libtiff on SL7.x x86_64 (20190806)

Security Fixes : - libtiff: buffer overflow in gif2tiff CVE-2016-3186 - libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution CVE-2018-12900 - libtiff: Out-of-bounds write in tifjbig.c CVE-2018-18557 - libtiff: NUL...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: ghostscript 9.25. Security Fixes : - ghostscript: status command permitted with -dSAFER in psi/zfile.c allowing attackers to identify the size and existence of files CVE-2018-11645 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : zziplib on SL7.x x86_64 (20190806)

Security Fixes : - zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c CVE-2018-6541 - zziplib: Memory leak triggered in the function zzipparserootdirectory in zip.c CVE-2018-16548 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : qt5 on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: qt5-qt3d 5.9.7, qt5-qtbase 5.9.7, qt5-qtcanvas3d 5.9.7, qt5-qtconnectivity 5.9.7, qt5-qtdeclarative 5.9.7, qt5-qtdoc 5.9.7, qt5-qtgraphicaleffects 5.9.7, qt5-qtimageformats 5.9.7, qt5-qtlocation 5.9.7, qt5-qtmultimedia 5.9.7,...

Scientific Linux Security Update : libvirt on SL7.x x86_64 (20190806)

Security Fixes : - libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function CVE-2019-3840 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128237; scriptversion"1.6";...

Scientific Linux Security Update : bind on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: bind 9.11.4. Security Fixes : - bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies CVE-2018-5741 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; i...

Scientific Linux Security Update : libmspack on SL7.x x86_64 (20190806)

Security Fixes : - libmspack: Out-of-bounds write in mspack/cab.h CVE-2018-18584 - libmspack: chmdreadheaders fails to reject filenames containing NULL bytes CVE-2018-18585 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description...

Scientific Linux Security Update : http-parser on SL7.x x86_64 (20190806)

Security Fixes : - nodejs: Denial of Service with large HTTP headers CVE-2018-12121 - nodejs: HTTP parser allowed for spaces inside Content-Length header values CVE-2018-7159 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description...

Scientific Linux Security Update : mercurial on SL7.x x86_64 (20190806)

Security Fixes : - mercurial: Buffer underflow in mpatch.c:mpatchapply CVE-2018-13347 - mercurial: HTTP server permissions bypass CVE-2018-1000132 - mercurial: Missing check for fragment start position in mpatch.c:mpatchapply CVE-2018-13346 C Tenable Network Security, Inc. The descriptive text is...

Scientific Linux Security Update : elfutils on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: elfutils 0.176. Security Fixes : - elfutils: Heap-based buffer over-read in libdw/dwarfgetaranges.c:dwarfgetaranges via crafted file CVE-2018-16062 - elfutils: Double-free due to double decompression of sections in crafted ELF...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20190806)

Security Fixes : - QEMU: Slirp: information leakage in tcpemu due to uninitialized stack variables CVE-2019-9824 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128257; scriptversion"1.4";...

Scientific Linux Security Update : python on SL7.x x86_64 (20190806)

Security Fixes : - python: Missing salt initialization in elementtree.c module CVE-2018-14647 - python: NULL pointer dereference using a specially crafted X509 certificate CVE-2019-5010 - python: CRLF injection via the query part of the url passed to urlopen CVE-2019-9740 - python: CRLF injection...

Scientific Linux Security Update : Xorg on SL7.x x86_64 (20190806)

Security Fixes : - libX11: Crash on invalid reply in XListExtensions in ListExt.c CVE-2018-14598 - libX11: Off-by-one error in XListExtensions in ListExt.c CVE-2018-14599 - libX11: Out of Bounds write in XListExtensions in ListExt.c CVE-2018-14600 - libxkbcommon: Invalid free in...

Scientific Linux Security Update : kde-workspace on SL7.x x86_64 (20190806)

Security Fixes : - kde-workspace: Missing sanitization of notifications allows to leak client IP address via IMG element CVE-2018-6790 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128224; scriptversion"1.4";...

Scientific Linux Security Update : uriparser on SL7.x x86_64 (20190806)

uriparser: Out-of-bounds write via uriComposeQuery or uriComposeQueryEx function CVE-2018-19198 uriparser: Integer overflow via uriComposeQuery or uriComposeQueryEx function CVE-2018-19199 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...