Scientific Linux Security Update : bind on SL6.x i386/x86_64 (20180827)

Security Fixes : - bind: processing of certain records when 'deny-answer-aliases' is in use may trigger an assert leading to a denial of service CVE-2018-5740 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid112135;...

Scientific Linux Security Update : bind on SL7.x x86_64 (20180827)

Security Fixes : - bind: processing of certain records when 'deny-answer-aliases' is in use may trigger an assert leading to a denial of service CVE-2018-5740 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid112136;...

Scientific Linux Security Update : postgresql on SL7.x x86_64 (20180823)

The following packages have been upgraded to a later upstream version: postgresql 9.2.24. Security Fixes : - postgresql: Certain host connection parameters defeat client-side security defenses CVE-2018-10915 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...

Scientific Linux Security Update : mutt on SL6.x, SL7.x i386/x86_64 (20180821)

Security Fixes : - mutt: Remote code injection vulnerability to an IMAP mailbox CVE-2018-14354 - mutt: Remote Code Execution via backquote characters CVE-2018-14357 - mutt: POP body caching path traversal vulnerability CVE-2018-14362 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20180816)

The following packages have been upgraded to a later upstream version: mariadb 5.5.60. Security Fixes : - mysql: Client programs unspecified vulnerability CPU Jul 2017 CVE-2017-3636 - mysql: Server: DML unspecified vulnerability CPU Jul 2017 CVE-2017-3641 - mysql: Client mysqldump unspecified...

Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20180816)

Security Fixes : - QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams CVE-2018-11806 - QEMU: i386: multiboot OOB access while loading kernel image CVE-2018-7550 Bug Fixes : - Previously, live migrating a Windows guest in some cases caused the guest to become unresponsive...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20180814) (Foreshadow)

Security Fixes : - Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented...

Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20180814) (Foreshadow)

Security Fixes : - Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented...

Scientific Linux Security Update : openslp on SL6.x i386/x86_64 (20180802)

Security Fixes : - openslp: Heap memory corruption in slpd/slpdprocess.c allows denial of service or potentially code execution CVE-2017-17833 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111523; scriptversion"1.5";...

Scientific Linux Security Update : yum-utils on SL6.x (noarch) (20180730)

Security Fixes : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111496; scriptversion"1.5";...

Scientific Linux Security Update : yum-utils on SL7.x (noarch) (20180730)

Security Fixes : - yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111497; scriptversion"1.5";...

Scientific Linux Security Update : java-1.7.0-openjdk on SL7.x x86_64 (20180730)

Security Fixes : - OpenJDK: insufficient index validation in PatternSyntaxException getMessage Concurrency, 8199547 CVE-2018-2952 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111495; scriptversion"1.5";...

Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64 (20180730)

Security Fixes : - OpenJDK: insufficient index validation in PatternSyntaxException getMessage Concurrency, 8199547 CVE-2018-2952 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111494; scriptversion"1.5";...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20180725)

This update upgrades Thunderbird to version 52.9.1. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 CVE-2018-5188 - Mozilla: Buffer overflow using computed size of canvas element CVE-2018-12359 - Mozilla: Use-after-free using focus...

Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20180723)

Security Fixes : - OpenJDK: insufficient index validation in PatternSyntaxException getMessage Concurrency, 8199547 CVE-2018-2952 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111258; scriptversion"1.6";...

Scientific Linux Security Update : openslp on SL7.x x86_64 (20180723)

Security Fixes : - openslp: Heap memory corruption in slpd/slpdprocess.c allows denial of service or potentially code execution CVE-2017-17833 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111260; scriptversion"1.5";...

Scientific Linux Security Update : gnupg2 on SL7.x x86_64 (20180712)

Security Fixes : - gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification CVE-2018-12020 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111113;...

Scientific Linux Security Update : gnupg2 on SL6.x i386/x86_64 (20180712)

Security Fixes : - gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification CVE-2018-12020 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid111050;...

Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20180710) (Spectre)

Security Fixes : - An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions a commonly used performance optimization. It relies on the presence of a precisely-defined instruction sequence in the privileged...

Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20180628)

This update upgrades Firefox to version 60.1.0 ESR. Many older firefox extensions must be updated to work with this new release. Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 CVE-2018-5188 - Mozilla: Buffer overflow using computed size ...