Scientific Linux Security Update : libwpd on SL7.x x86_64 (20190806)

Security Fixes : - libwpd: NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp CVE-2018-19208 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128238; scriptversion"1.4";...

Scientific Linux Security Update : sssd on SL7.x x86_64 (20190806)

The following packages have been upgraded to a later upstream version: sssd 1.16.4. Security Fixes : - sssd: fallbackhomedir returns '/' for empty home directories in passwd file CVE-2019-3811 - sssd: improper implementation of GPOs due to too restrictive permissions CVE-2018-16838 C Tenable...

Scientific Linux Security Update : libguestfs-winsupport on SL7.x x86_64 (20190806)

Security Fixes : - ntfs-3g: heap-based buffer overflow leads to local root privilege escalation CVE-2019-9755 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid128230; scriptversion"1.4";...

Scientific Linux Security Update : openssl on SL6.x i386/x86_64 (20190813)

Security Fixes : - openssl: 0-byte record padding oracle CVE-2019-1559 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed in the References section. C Tenable Network Security, Inc. The...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20190813)

Security Fixes : - Kernel: page cache side channel attacks CVE-2019-5489 - kernel: Salsa20 encryption algorithm does not correctly handle zero-length inputs allowing local attackers to cause denial-of-service CVE-2017-17805 - kernel: Unprivileged users able to inspect kernel stacks of arbitrary...

Scientific Linux Security Update : 389-ds-base on SL7.x x86_64 (20190729)

Security Fixes : - 389-ds-base: DoS via hanging secured connections CVE-2019-3883 Bug Fixes : - Previously, if you were using the PAM plugin and attempted to bind as a dn that doesn't exist, the server would crash. This has now been fixed. C Tenable Network Security, Inc. The descriptive text is ...

Scientific Linux Security Update : libssh2 on SL7.x x86_64 (20190729)

Security Fixes : - libssh2: Out-of-bounds memory comparison with specially crafted message channel request CVE-2019-3862 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid127727; scriptversion"1.4";...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20190729)

Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-ma packages provide the user-space component for running virtual machines that use KVM on the IBM z Systems, IBM Power, and 64-bit ARM architectures. Security Fixes : - QEMU:...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20190729)

Security Fixes : - kernel: nfs: use-after-free in svcprocesscommon CVE-2018-16884 - kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to privilege escalation CVE-2019-11085 - kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence...

Scientific Linux Security Update : httpd on SL7.x x86_64 (20190729)

Security Fixes : - httpd: Weak Digest auth nonce generation in modauthdigest CVE-2018-1312 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid127725; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : curl on SL7.x x86_64 (20190729)

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes : - curl: NTLM password overflow via integer overflow CVE-2018-14618 For more details about the security issues, including t...

10 Typical Mistakes in Scientific Research Paper Writing

By Owais Sultan To help you to improve the quality of your scientific research paper writing, we’ve compiled a list of ten typical mistakes found in scientific research paper writing. This is a post from HackRead.com Read the original post: 10 Typical Mistakes in Scientific Research Paper Writing...

SUSE-SU-2019:2042-1 Security update for python-Django

This update for python-Django fixes the following issues: - Fixed CVE-2019-6975 bsc1124991 Added CVE-2019-6975.patch to fix uncontrolled memory consumption If django.utils.numberformat.format -- used by contrib.admin as well as the the floatformat, filesizeformat, and intcomma templates filters -...

Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64 (20190723)

Security Fixes : - OpenJDK: Side-channel attack risks in Elliptic Curve EC cryptography Security, 8208698 CVE-2019-2745 - OpenJDK: Insufficient checks of suppressed exceptions in deserialization Utilities, 8212328 CVE-2019-2762 - OpenJDK: Unbounded memory allocation during deserialization in...

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20190722)

Security Fixes : - OpenJDK: Side-channel attack risks in Elliptic Curve EC cryptography Security, 8208698 CVE-2019-2745 - OpenJDK: Insufficient checks of suppressed exceptions in deserialization Utilities, 8212328 CVE-2019-2762 - OpenJDK: Unbounded memory allocation during deserialization in...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (SACK Panic) (SACK Slowness)

Based on the RPM metadata this appears to be a security kernel. The RPM changelog shows fixes related to Security Fixes : - An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment SACK segments. While processing SACK segments, t...

Scientific Linux Security Update : vim on SL6.x i386/x86_64 (20190715)

Security Fixes : - vim/neovim: ':source!' command allows arbitrary command execution via modelines CVE-2019-12735 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid126715; scriptversion"1.4";...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20190715)

This update upgrades Thunderbird to version 60.8.0. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 CVE-2019-11709 - Mozilla: Sandbox escape via installation of malicious language pack CVE-2019-9811 - Mozilla: Script injection within domain through inner...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20190715)

This update upgrades Thunderbird to version 60.8.0. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 CVE-2019-11709 - Mozilla: Sandbox escape via installation of malicious language pack CVE-2019-9811 - Mozilla: Script injection within domain through inner...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20190711)

This update upgrades Firefox to version 60.8.0 ESR. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 68 and Firefox ESR 60.8 CVE-2019-11709 - Mozilla: Sandbox escape via installation of malicious language pack CVE-2019-9811 - Mozilla: Script injection within domain through inner...