Synopsis: Important: sudo security update Advisory ID: SLSA-2021:0221-1 Issue Date: 2021-01-26 CVE Numbers: CVE-2021-3156 — Security Fix(es): * sudo: Heap buffer overflow in argument parsing (CVE-2021-3156) — SL7 x86_64 sudo-1.8.23-10.el7_9.1.x86_64.rpm sudo-debuginfo-1.8.23-10.el7_9.1.x86_64.rpm sudo-debuginfo-1.8.23-10.el7_9.1.i686.rpm sudo-devel-1.8.23-10.el7_9.1.i686.rpm sudo-devel-1.8.23-10.el7_9.1.x86_64.rpm – Scientific Linux Development Team
Synopsis: Moderate: dnsmasq security update Advisory ID: SLSA-2021:0153-1 Issue Date: 2021-01-19 CVE Numbers: CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 — Security Fix(es): * dnsmasq: loose address/port check in reply_query() makes forging replies easier for an off-path attacker (CVE-2020-25684) * dnsmasq: loose query name … Read More
Synopsis: Important: xstream security update Advisory ID: SLSA-2021:0162-1 Issue Date: 2021-01-19 CVE Numbers: CVE-2020-26217 — Security Fix(es): * XStream: remote code execution due to insecure XML deserialization when relying on blocklists (CVE-2020-26217) — SL7 noarch xstream-1.3.1-12.el7_9.noarch.rpm xstream-javadoc-1.3.1-12.el7_9.noarch.rpm – Scientific Linux … Read More
Synopsis: Critical: thunderbird security update Advisory ID: SLSA-2021:0087-1 Issue Date: 2021-01-14 CVE Numbers: CVE-2020-16044 — This update upgrades Thunderbird to version 78.6.1. Security Fix(es): * Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk (CVE-2020-16044) — SL7 x86_64 thunderbird-78.6.1-1.el7_9.x86_64.rpm … Read More
Synopsis: Critical: firefox security update Advisory ID: SLSA-2021:0053-1 Issue Date: 2021-01-11 CVE Numbers: CVE-2020-16044 — This update upgrades Firefox to version 78.6.1 ESR. Security Fix(es): * Mozilla: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk (CVE-2020-16044) — SL7 x86_64 … Read More
Synopsis: Important: ImageMagick security update Advisory ID: SLSA-2021:0024-1 Issue Date: 2021-01-05 CVE Numbers: None — Security Fix(es): * ImageMagick: Shell injection via PDF password could result in arbitrary code execution (CVE-2020-29599) — SL7 x86_64 ImageMagick-6.9.10.68-5.el7_9.i686.rpm ImageMagick-6.9.10.68-5.el7_9.x86_64.rpm ImageMagick-c++-6.9.10.68-5.el7_9.i686.rpm ImageMagick-c++-6.9.10.68-5.el7_9.x86_64.rpm ImageMagick-debuginfo-6.9.10.68-5.el7_9.i686.rpm ImageMagick-debuginfo-6.9.10.68-5.el7_9.x86_64.rpm … Read More
Synopsis: Important: thunderbird security update Advisory ID: SLSA-2020:5618-1 Issue Date: 2020-12-17 CVE Numbers: CVE-2020-16042 CVE-2020-26971 CVE-2020-26973 CVE-2020-26974 CVE-2020-26978 CVE-2020-35111 CVE-2020-35113 — This update upgrades Thunderbird to version 78.6.0. Security Fix(es): * chromium-browser: Uninitialized Use in V8 (CVE-2020-16042) * Mozilla: Heap … Read More
Synopsis: Important: firefox security update Advisory ID: SLSA-2020:5561-1 Issue Date: 2020-12-17 CVE Numbers: None — Security Fix(es): * chromium-browser: Uninitialized Use in V8 (CVE-2020-16042) * Mozilla: Heap buffer overflow in WebGL (CVE-2020-26971) * Mozilla: CSS Sanitizer performed incorrect sanitization (CVE-2020-26973) … Read More
Synopsis: Important: openssl security update Advisory ID: SLSA-2020:5566-1 Issue Date: 2020-12-17 CVE Numbers: CVE-2020-1971 — Security Fix(es): * openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971) — SL7 x86_64 openssl-1.0.2k-21.el7_9.x86_64.rpm openssl-debuginfo-1.0.2k-21.el7_9.i686.rpm openssl-debuginfo-1.0.2k-21.el7_9.x86_64.rpm openssl-libs-1.0.2k-21.el7_9.i686.rpm openssl-libs-1.0.2k-21.el7_9.x86_64.rpm openssl-devel-1.0.2k-21.el7_9.i686.rpm openssl-devel-1.0.2k-21.el7_9.x86_64.rpm openssl-perl-1.0.2k-21.el7_9.x86_64.rpm openssl-static-1.0.2k-21.el7_9.i686.rpm openssl-static-1.0.2k-21.el7_9.x86_64.rpm – Scientific Linux … Read More
Synopsis: Moderate: samba security and bug fix update Advisory ID: SLSA-2020:5439-1 Issue Date: 2020-12-15 CVE Numbers: None — Security Fix(es): * samba: Netlogon elevation of privilege vulnerability (Zerologon) (CVE-2020-1472) * samba: Missing handle permissions check in SMB1/2/3 ChangeNotify (CVE-2020-14318) * … Read More
