Synopsis: Moderate: python-urllib3 security update Advisory ID: SLSA-2019:2272-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2018-20060 CVE-2019-11236 — Security Fix(es): * python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure (CVE-2018-20060) * python-urllib3: CRLF injection due to not encoding … Read More
Synopsis: Low: ntp security, bug fix, and enhancement update Advisory ID: SLSA-2019:2077-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2018-12327 — Security Fix(es): * ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of service or code execution (CVE-2018-12327) — SL7 … Read More
Synopsis: Low: patch security and bug fix update Advisory ID: SLSA-2019:2033-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2018-6952 CVE-2016-10713 — Security Fix(es): * patch: Out-of-bounds access in pch_write_line function in pch.c (CVE-2016-10713) * patch: Double free of memory in pch.c:another_hunk() causes … Read More
Synopsis: Low: curl security and bug fix update Advisory ID: SLSA-2019:2181-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2018-16842 — Security Fix(es): * curl: Heap-based buffer over-read in the curl tool warning formatting (CVE-2018-16842) — SL7 x86_64 curl-7.29.0-54.el7.x86_64.rpm libcurl-7.29.0-54.el7.x86_64.rpm libcurl-7.29.0-54.el7.i686.rpm libcurl-devel-7.29.0-54.el7.x86_64.rpm libcurl-devel-7.29.0-54.el7.i686.rpm … Read More
Synopsis: Low: libguestfs-winsupport security update Advisory ID: SLSA-2019:2308-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2019-9755 — Security Fix(es): * ntfs-3g: heap-based buffer overflow leads to local root privilege escalation (CVE-2019-9755) — SL7 x86_64 libguestfs-winsupport-7.2-3.el7.x86_64.rpm – Scientific Linux Development Team
Synopsis: Low: keycloak-httpd-client-install security, bug fix, and Advisory ID: SLSA-2019:2137-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2017-15112 CVE-2017-15111 — Security Fix(es): * keycloak-httpd-client-install: unsafe /tmp log file in –log-file option in keycloak_cli.py (CVE-2017-15111) * keycloak-httpd-client-install: unsafe use of -p/–admin-password on command … Read More
Synopsis: Moderate: mod_auth_openidc security update Advisory ID: SLSA-2019:2112-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2017-6413 CVE-2017-6059 — Security Fix(es): * mod_auth_openidc: OIDC_CLAIM and OIDCAuthNHeader not skipped in an “AuthType oauth20″ configuration (CVE-2017-6413) * mod_auth_openidc: Shows user-supplied content on error pages (CVE-2017-6059) … Read More
Synopsis: Moderate: libmspack security update Advisory ID: SLSA-2019:2049-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2018-18584 CVE-2018-18585 — Security Fix(es): * libmspack: Out-of-bounds write in mspack/cab.h (CVE-2018-18584) * libmspack: chmd_read_headers() fails to reject filenames containing NULL bytes (CVE-2018-18585) — SL7 x86_64 libmspack-0.5-0.7.alpha.el7.i686.rpm … Read More
Synopsis: Low: compat-libtiff3 security update Advisory ID: SLSA-2019:2051-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2018-7456 — Security Fix(es): * libtiff: NULL pointer dereference in tif_print.c:TIFFPrintDirectory() causes a denial of service (CVE-2018-7456) — SL7 x86_64 compat-libtiff3-3.9.4-12.el7.i686.rpm compat-libtiff3-3.9.4-12.el7.x86_64.rpm compat-libtiff3-debuginfo-3.9.4-12.el7.i686.rpm compat-libtiff3-debuginfo-3.9.4-12.el7.x86_64.rpm – Scientific Linux … Read More
Synopsis: Low: libreoffice security and bug fix update Advisory ID: SLSA-2019:2130-1 Issue Date: 2019-08-06 CVE Numbers: CVE-2018-16858 — Security Fix(es): * libreoffice: Arbitrary python functions in arbitrary modules on the filesystem can be executed without warning (CVE-2018-16858) — SL7 x86_64 … Read More
