Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20190125)

This update upgrades Thunderbird to version 60.4.0. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4 CVE-2018-12405 - chromium-browser, firefox: Memory corruption in Angle CVE-2018-17466 - Mozilla: Use-after-free with select element CVE-2018-18492 - Mozilla:...

Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20190125)

This update upgrades Thunderbird to version 60.4.0. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4 CVE-2018-12405 - chromium-browser, firefox: Memory corruption in Angle CVE-2018-17466 - Mozilla: Use-after-free with select element CVE-2018-18492 - Mozilla:...

Scientific Linux Security Update : perl on SL7.x x86_64 (20190122)

Security Fixes : - perl: Integer overflow leading to buffer overflow in Perlmysetenv CVE-2018-18311 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid121326; scriptversion"1.3";...

Scientific Linux Security Update : libvncserver on SL7.x x86_64 (20190115)

Security Fixes : - libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer allows for potential code execution CVE-2018-15127 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid121205;...

Scientific Linux Security Update : systemd on SL7.x x86_64 (20190114)

Security Fixes : - systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling CVE-2018-15688 - systemd: stack overflow when calling syslog from a command with long cmdline CVE-2018-16864 - systemd: stack overflow when receiving many journald entries CVE-2018-16865 C Tenable...

Scientific Linux Security Update : keepalived on SL7.x x86_64 (20190103)

Security Fixes : - keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or possibly arbitrary code execution CVE-2018-19115 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid120980...

verder-scientific.com XSS vulnerability

Open Bug Bounty ID: OBB-717959 Description| Value ---|--- Affected Website:| verder-scientific.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Scientific Linux Security Update : ntp on SL6.x i386/x86_64 (20181220)

Security Fixes : - ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of service or code execution CVE-2018-12327 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid119884; scriptversion"1.4";...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20181217)

Security Fixes : - ghostscript: Incorrect free logic in pagedevice replacement 699664 CVE-2018-16541 - ghostscript: Incorrect 'restoration of privilege' checking when running out of stack during exception handling CVE-2018-16802 - ghostscript: User-writable error exception table CVE-2018-17183 -...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20181217)

This update upgrades Firefox to version 60.4.0 ESR. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 64 and Firefox ESR 60.4 CVE-2018-12405 - Mozilla: Memory corruption in Angle CVE-2018-17466 - Mozilla: Use-after-free with select element CVE-2018-18492 - Mozilla: Buffer overflow i...

Scientific Linux Security Update : ruby on SL7.x x86_64 (20181130)

Security Fixes : - ruby: OpenSSL::X509::Name equality check does not work correctly CVE-2018-16395 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid119444; scriptversion"1.6";...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20181204)

Security Fixes : - ghostscript: incomplete fix for CVE-2018-16509 CVE-2018-16863 Bug Fixes : - Previously, the flushpage operator has been removed as part of a major clean-up of a non-standard operator. However, flushpage has been found to be used in a few specific use cases. With this update, it...

Scientific Linux Security Update : ghostscript on SL6.x i386/x86_64 (20181204)

Security Fixes : - It was discovered that the ghostscript /invalidaccess checks fail under certain conditions. An attacker could possibly exploit this to bypass the - -dSAFER protection and, for example, execute arbitrary shell commands via a specially crafted PostScript document. CVE-2018-16509 ...

Scientific Linux Security Update : sos-collector on SL7.x (noarch) (20181127)

The following packages have been upgraded to a later upstream version: sos-collector 1.5. Security Fixes : - sos-collector: incorrect permissions set on newly created files CVE-2018-14650 This issue was discovered by Riccardo Schirone Red Hat Product Security. C Tenable Network Security, Inc. The...

Scientific Linux Security Update : NetworkManager on SL7.x x86_64 (20181127)

Security Fixes : - systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling CVE-2018-15688 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include"compat.inc"; if description scriptid119249; scriptversion"1.8";...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20181127)

Security Fixes : - kernel: stack-based buffer overflow in chapservercomputemd5 in iscsi target CVE-2018-14633 - kernel: NULL pointer dereference in afnetlink.c:netlinknscapable allows for denial of service CVE-2018-14646 Bug Fixes : See the descriptions in the related Knowledge Article : C Tenabl...

Scientific Linux Security Update : ghostscript on SL7.x x86_64 (20181127)

Security Fixes : - ghostscript: .tempfile file permission issues 699657 CVE-2018-15908 - ghostscript: shadingparam incomplete type checking 699660 CVE-2018-15909 - ghostscript: missing type check in type checker 699659 CVE-2018-16511 - ghostscript: incorrect access checking in temp file handling ...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20181109)

This update upgrades Thunderbird to version 60.3.0. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3 CVE-2018-12390 - Mozilla: Crash with nested event loops CVE-2018-12392 - Mozilla: Integer overflow during Unicode conversion while loading JavaScript...

Scientific Linux Security Update : jasper on SL7.x x86_64 (20181030)

Security Fixes : - jasper: reachable assertion in JPCNOMINALGAIN CVE-2016-9396 - jasper: NULL pointer exception in jp2encode CVE-2017-1000050 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid119185; scriptversion"1.5";...

Scientific Linux Security Update : krb5 on SL7.x x86_64 (20181030)

Security Fixes : - krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data CVE-2018-5729 - krb5: DN container check bypass by supplying special crafted data CVE-2018-5730 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...