Scientific Linux Security Update : samba on SL7.x x86_64 (20201001)

Security Fixes : - samba: Crash after failed character conversion at log level 3 or above CVE-2019-14907 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141648; scriptversion"1.3";...

Scientific Linux Security Update : libsrtp on SL7.x x86_64 (20201001)

Security Fixes : - libsrtp: improper handling of CSRC count and extension header length in RTP header CVE-2015-6360 - libsrtp: buffer overflow in application of crypto profiles CVE-2013-2139 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if...

Scientific Linux Security Update : mariadb on SL7.x x86_64 (20201001)

Security Fixes : - mysql: Server: Optimizer unspecified vulnerability CPU Oct 2019 CVE-2019-2974 - mysql: C API unspecified vulnerability CPU Apr 2020 CVE-2020-2752 - mysql: Server: DML unspecified vulnerability CPU Apr 2020 CVE-2020-2780 - mysql: Server: Stored Procedure unspecified vulnerabilit...

Scientific Linux Security Update : e2fsprogs on SL7.x x86_64 (20201001)

Security Fixes : - e2fsprogs: Crafted ext4 partition leads to out-of-bounds write CVE-2019-5094 - e2fsprogs: Out-of-bounds write in e2fsck/rehash.c CVE-2019-5188 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141754;...

Scientific Linux Security Update : qt5-qtbase on SL7.x x86_64 (20201001)

Security Fixes : - qt: files placed by attacker can influence the working directory and lead to malicious code execution CVE-2020-0569 - qt: files placed by attacker can influence the working directory and lead to malicious code execution CVE-2020-0570 C Tenable Network Security, Inc. The...

Scientific Linux Security Update : okular on SL7.x x86_64 (20201001)

Security Fixes : - okular: local binary execution via specially crafted PDF files CVE-2020-9359 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141744; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate"...

Scientific Linux Security Update : tomcat on SL7.x x86_64 (20201001)

Security Fixes : - tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS CVE-2020-13935 - tomcat: session fixation when using FORM authentication CVE-2019-17563 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc';...

Scientific Linux Security Update : openwsman on SL7.x x86_64 (20201001)

Security Fixes : - openwsman: Infinite loop in processconnection allows denial of service CVE-2019-3833 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141728; scriptversion"1.3";...

Scientific Linux Security Update : curl on SL7.x x86_64 (20201001)

Security Fixes : - curl: heap buffer overflow in function tftpreceivepacket CVE-2019-5482 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141681; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : python on SL7.x x86_64 (20201001)

Security Fixes : - python: XSS vulnerability in the documentation XML-RPC server in servertitle field CVE-2019-16935 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141713; scriptversion"1.3";...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20201001)

Security Fixes : - Mozilla: Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3 CVE-2020-15673 - Mozilla: XSS when pasting attacker-controlled data into a contenteditable element CVE-2020-15676 - Mozilla: Download origin spoofing via redirect CVE-2020-15677 - Mozilla: When recursing throu...

Scientific Linux Security Update : dovecot on SL7.x x86_64 (20200903)

Security Fixes : - dovecot: Resource exhaustion via deeply nested MIME parts CVE-2020-12100 - dovecot: Out of bound reads in dovecot NTLM implementation CVE-2020-12673 - dovecot: Crash due to assert in RPA implementation CVE-2020-12674 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200806)

Security Fixes : - chromium-browser: Use after free in ANGLE CVE-2020-6463 - chromium-browser: Inappropriate implementation in WebRTC CVE-2020-6514 - Mozilla: Potential leak of redirect targets when loading scripts in a worker CVE-2020-15652 - Mozilla: Memory safety bugs fixed in Firefox 79 and...

Scientific Linux Security Update : libvncserver on SL7.x x86_64 (20200803)

Security Fixes : - libvncserver: websocket decoding buffer overflow CVE-2017-18922 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid139301; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x x86_64 (20200716)

Security Fixes : - OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access Libraries, 8238920 CVE-2020-14583 - OpenJDK: Incomplete bounds checks in Affine Transformations 2D, 8240119 CVE-2020-14593 - OpenJDK: Incorrect handling of access control context in ForkJoinPool Libraries,...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20200707)

Security Fixes : - Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64 CVE-2020-12417 - Mozilla: Information disclosure due to manipulated URL object CVE-2020-12418 - Mozilla: Use-after-free in nsGlobalWindowInner CVE-2020-12419 - Mozilla: Use-After-Free when trying to...

Scientific Linux Security Update : freerdp on SL7.x x86_64 (20200609)

Security Fixes : - freerdp: Out-of-bounds write in cryptorsacommon in libfreerdp/crypto/crypto.c CVE-2020-13398 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid137293; scriptversion"1.4";...

Scientific Linux Security Update : unbound on SL7.x x86_64 (20200609)

Security Fixes : - unbound: amplification of an incoming query into a large number of queries directed to a target CVE-2020-12662 - unbound: infinite loop via malformed DNS answers received from upstream servers CVE-2020-12663 C Tenable Network Security, Inc. The descriptive text is C Scientific...

Scientific Linux Security Update : firefox on SL7.x x86_64 (20200603)

Security Fixes : - Mozilla: Use-after-free in SharedWorkerService CVE-2020-12405 - Mozilla: JavaScript Type confusion with NativeTypes CVE-2020-12406 - Mozilla: Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9 CVE-2020-12410 C Tenable Network Security, Inc. The descriptive text is C...

Scientific Linux Security Update : python-pip on SL7.x (noarch) (20200512)

Security Fixes : - python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure CVE-2018-20060 - python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service CVE-2019-11236 - python-urllib3:...