SLBA-2018:1857-1noneScientific LinuxScientific Linux 6copy-jdk-configs-3.3-9.el6.noarch.rpm3265471cef84f21333bce8cf101268b52cc7f6fa5fdc136ecbf9de61dd9d02e9SLSA-2018:2112-1This update upgrades Firefox to version 60.1.0 ESR. Many older firefox extensions must be updated to work with this new release. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 (CVE-2018-5188) * Mozilla: Buffer overflow using computed size of canvas element (CVE-2018-12359) * Mozilla: Use-after-free using focus() (CVE-2018-12360) * Mozilla: Media recorder segmentation fault when track type is changed during capture (CVE-2018-5156) * Skia: Heap buffer overflow rasterizing paths in SVG (CVE-2018-6126) * Mozilla: Integer overflow in SSSE3 scaler (CVE-2018-12362) * Mozilla: Use-after-free when appending DOM nodes (CVE-2018-12363) * Mozilla: CSRF attacks through 307 redirects and NPAPI plugins (CVE-2018-12364) * Mozilla: address bar username and password spoofing in reader mode (CVE-2017-7762) * Mozilla: Compromised IPC child process can list local filenames (CVE-2018-12365) * Mozilla: Invalid data handling during QCMS transformations (CVE-2018-12366)criticalScientific LinuxScientific Linux 6sl-indexhtml-6-10.sl6.noarch.rpm0f82668f4f3c98b676cee0160a8cc705afac62e804119a22f492639b351ae5e3firefox-60.1.0-5.el6.i686.rpm52352fe1da4c80f585189ac6340a75ddc8cda3cb01ccc5767690c8d1f93604c4firefox-60.1.0-5.el6.x86_64.rpm78b6cc1cd9de013f8ff351ff6bc096c58f402dfe233b8851ed4dd2ce28c448e4SLSA-2018:2162-1Security Fix(es): * An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks. (CVE-2018-3639) Note: This is the qemu-kvm side of the CVE-2018-3639 mitigation. * QEMU: cirrus: OOB access when updating VGA display (CVE-2018-7858) * QEMU: vga: OOB read access during display update (CVE-2017-13672) * Qemu: Out-of-bounds read in vga_draw_text routine (CVE-2018-5683)importantScientific LinuxScientific Linux 6qemu-img-0.12.1.2-2.506.el6_10.1.x86_64.rpm3a4cf3e149a747a4464dfe61cf9c34c853e0f2de95aa061e1ffa50c4d44e463fqemu-kvm-tools-0.12.1.2-2.506.el6_10.1.x86_64.rpm5ac367817427426407bab1603875f38fff238afb96cb33013c8f8367c35db3b7qemu-guest-agent-0.12.1.2-2.506.el6_10.1.x86_64.rpma97a2d1e366e7b920dba687a09b4e70646f56d163976d7a4b2eabe924931728eqemu-kvm-0.12.1.2-2.506.el6_10.1.x86_64.rpm2c73126b7f633b62b2990d749ba449a7debbbe70c752051ca35c2aa0ce3ab360SLSA-2018:2164-1Security Fix(es): * An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of Load & Store instructions (a commonly used performance optimization). It relies on the presence of a precisely-defined instruction sequence in the privileged code as well as the fact that memory read from address to which a recent memory write has occurred may see an older value and subsequently cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to read privileged memory by conducting targeted cache side-channel attacks. (CVE-2018-3639, x86 AMD) * kernel: Use-after-free vulnerability in mm/mempolicy.c:do_get_mempolicy function allows local denial of service or other unspecified impact (CVE-2018-10675) * Kernel: FPU state information leakage via lazy FPU restore (CVE-2018-3665) * kernel: error in exception handling leads to DoS (CVE-2018-8897 regression) (CVE-2018-10872) Bug Fix(es): * Previously, microcode updates on 32 and 64-bit AMD and Intel architectures were not synchronized. As a consequence, it was not possible to apply the microcode updates. This fix adds the synchronization to the microcode updates so that processors of the stated architectures receive updates at the same time. As a result, microcode updates are now synchronized.importantScientific LinuxScientific Linux 6kernel-abi-whitelists-2.6.32-754.2.1.el6.noarch.rpmfdc54d149663e61aca9ddf3d71cc911c62f56856622efa647788d5344231de07perf-2.6.32-754.2.1.el6.x86_64.rpm5af6b973ee645f37c07f71e09498f736b940d458a214646e3571b710fceb66d9kernel-debug-devel-2.6.32-754.2.1.el6.x86_64.rpm9b96e28ef090e38151db7cab0aaec62a52d5037665bfc99727935f999c1588afkernel-2.6.32-754.2.1.el6.x86_64.rpm2b3f8fa1f5defa180886a9c1cba2a251fe84d003932a19390117b7003928d6f1kernel-debug-devel-2.6.32-754.2.1.el6.i686.rpm821b5d489d85af46b0385712904182a1012cdf892b079e77767c5c74150ea5adkernel-devel-2.6.32-754.2.1.el6.x86_64.rpmf1bb4a841cf0ea4424ca109ef3b5ada0ddddaea6261ce443b87d5d8f2ee513c8python-perf-2.6.32-754.2.1.el6.x86_64.rpm7360a07e71cde6680c4791414e5412f84d768c800e2c9f4fd25fabf89dd85d0ekernel-headers-2.6.32-754.2.1.el6.x86_64.rpm8610ae061af63510629e221d5847c08b65af95076d0f41ea851f7e064e24f046kernel-firmware-2.6.32-754.2.1.el6.noarch.rpm6f98f13f8960365ad13a81c46a408d7c40089e966c557c0ee8261ca2b27356e5kernel-debug-2.6.32-754.2.1.el6.x86_64.rpm21ae885152f3e1b27d3a4e544b7232681e609b51da7679af4952314de30ac3c2kernel-doc-2.6.32-754.2.1.el6.noarch.rpme29f995b78509d2d04f34728442ebb8c7ba9dc1f6a99b3c35086f2039082b75fSLSA-2018:2180-1Security Fix(es): * gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification (CVE-2018-12020)importantScientific LinuxScientific Linux 6gnupg2-smime-2.0.14-9.el6_10.x86_64.rpm33ad34ad370f24a36ad9b5bfcaaad85e800bbc5fb0613a1ae40e7805f6eca2d5gnupg2-2.0.14-9.el6_10.x86_64.rpmaa359b0609cc8ca4efe000156ee36f83cd543eb2aee1b6cce359450627eb736fSLSA-2018:2241-1Security Fix(es): * OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)moderateScientific LinuxScientific Linux 6java-1.8.0-openjdk-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm537ec6960444885662b16b7e2f1c67f366a77ccc26f4f0b95dec188ef01827eejava-1.8.0-openjdk-devel-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm304007f8b36b0cb9ff426080dee80fbf94712a093cd81ca25b9d04b63dcfbdf0java-1.8.0-openjdk-headless-debug-1.8.0.181-3.b13.el6_10.x86_64.rpmc4175f77615227e44bc4db494cff16abefc1025a02bdfb4edbe94321e75fcde3java-1.8.0-openjdk-demo-1.8.0.181-3.b13.el6_10.x86_64.rpm715e67847fb90b59857d555516fef7872f519d2a8eadd64896f8e03d817be4acjava-1.8.0-openjdk-src-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm5b7a7af03c3969c262a11502c69c38649ac6e3e4fcd0e5fdf4a99f6ee3fb53b8java-1.8.0-openjdk-src-1.8.0.181-3.b13.el6_10.x86_64.rpm895f6af65922cbcf542a0e3bc16a2c0672fcd7e7cb7e1802f1f4c3c28cdb4b99java-1.8.0-openjdk-devel-1.8.0.181-3.b13.el6_10.x86_64.rpm67877dbb6a0ef9e45e4c99cb4b825e23a9209433df0e53442112840a9a75b5c2java-1.8.0-openjdk-1.8.0.181-3.b13.el6_10.x86_64.rpm237fba255dea7de8fd25c51a911f388b64ddb28e8ffb7fd7b4a4033491f5429cjava-1.8.0-openjdk-javadoc-debug-1.8.0.181-3.b13.el6_10.noarch.rpm2691bd4f9a84b729590e87d8b2c30540cefefd7b7e41908a4abb1b2c9b2a5702java-1.8.0-openjdk-demo-debug-1.8.0.181-3.b13.el6_10.x86_64.rpm78f95416d6c5f0adb9b758404f9762400a5ac627952ca3715512743c3f4ad51cjava-1.8.0-openjdk-headless-1.8.0.181-3.b13.el6_10.x86_64.rpmf4b9ec708d180cbee338bfa1bdfc7cbb5d6716ae85a8a1fd0f7990f966b06d50java-1.8.0-openjdk-javadoc-1.8.0.181-3.b13.el6_10.noarch.rpm62b560057b715e4ce12cf994734a899432bbc8cfc32a1f9f015c2c7777c38ad9SLSA-2018:2251-1This update upgrades Thunderbird to version 52.9.1. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 (CVE-2018-5188) * Mozilla: Buffer overflow using computed size of canvas element (CVE-2018-12359) * Mozilla: Use-after-free using focus() (CVE-2018-12360) * Mozilla: Integer overflow in SSSE3 scaler (CVE-2018-12362) * Mozilla: Use-after-free when appending DOM nodes (CVE-2018-12363) * Mozilla: CSRF attacks through 307 redirects and NPAPI plugins (CVE-2018-12364) * thunderbird: S/MIME and PGP decryption oracles can be built with HTML emails (CVE-2018-12372) * thunderbird: S/MIME plaintext can be leaked through HTML reply/forward (CVE-2018-12373) * Mozilla: Compromised IPC child process can list local filenames (CVE-2018-12365) * Mozilla: Invalid data handling during QCMS transformations (CVE-2018-12366) * thunderbird: Using form to exfiltrate encrypted mail part by pressing enter in form field (CVE-2018-12374)importantScientific LinuxScientific Linux 6thunderbird-52.9.1-1.el6.x86_64.rpme2046c829910549880bc2b05d25453f23186c9f3ddef01110f96014d3b98536eSLSA-2018:2283-1Security Fix(es): * OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547) (CVE-2018-2952)moderateScientific LinuxScientific Linux 6java-1.7.0-openjdk-src-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm04fe87af0fb65b2125472f2d3d87adea5d8a4c4e73411925cc41ccaa8f4442a7java-1.7.0-openjdk-1.7.0.191-2.6.15.4.el6_10.x86_64.rpmd31014b96830853291293a6c81f2f03a5b0e31d49aea392d2abbb3f16be48f2bjava-1.7.0-openjdk-demo-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm277900ba0706f072b7dbf4cff360d60447164a33bca673a78a6fc0989cf657b9java-1.7.0-openjdk-javadoc-1.7.0.191-2.6.15.4.el6_10.noarch.rpm1413de66858fffd7be69dd4f496177c1ee21b8875cc20df1bcf3a99c75a5c83ajava-1.7.0-openjdk-devel-1.7.0.191-2.6.15.4.el6_10.x86_64.rpm0184f001f089e3fa8ddaceb92a0187789d704988fcb6b5d221ee34955eb28b25SLSA-2018:2284-1Security Fix(es): * yum-utils: reposync: improper path validation may lead to directory traversal (CVE-2018-10897)importantScientific LinuxScientific Linux 6yum-plugin-show-leaves-1.1.30-42.el6_10.noarch.rpm4d6e9b1612c1a8a46b4024fdcd055cd17c3f6b727989bdaadac1a36a3c877845yum-plugin-rpm-warm-cache-1.1.30-42.el6_10.noarch.rpm204c3746eeb040ef109e09b076d07100c42f458a7297faed226effda8e9b441fyum-plugin-tmprepo-1.1.30-42.el6_10.noarch.rpme99f7e126faa01a980cada21f07895e5bd5d33784469e6fe9cd34bbd9cd932e3yum-plugin-verify-1.1.30-42.el6_10.noarch.rpm3594f07f96de23e75358d99dbed6b8ca651c3a2b17e263b177713874665ca69ayum-utils-1.1.30-42.el6_10.noarch.rpm18964c5dd295e7517a568d1ace3e4b04e9ce7fbb6edff47875a516137ed1017fyum-plugin-post-transaction-actions-1.1.30-42.el6_10.noarch.rpm0021690dfd14c3f7467073e75a1f3a819e7096facd6e31d52bfc3745e91461fdyum-plugin-list-data-1.1.30-42.el6_10.noarch.rpmadc02f3944c0b94cd4d6aae3317cb6bc768e57377b127c3e925946c1e4e8025dyum-plugin-fastestmirror-1.1.30-42.el6_10.noarch.rpm6035740076674b34195a8a0b8541cf3d6a8d05bd3f3b091cbe5558d753c6041dyum-plugin-aliases-1.1.30-42.el6_10.noarch.rpm23c0431eb9c10d6232b1a1d403ef164c46e86591565c6d0bc69f07178dccb3f4yum-plugin-ovl-1.1.30-42.el6_10.noarch.rpm945e680bb51d2c9613a3fa5917bc23de86a5185b24ca1d192440577f7244aa0eyum-plugin-tsflags-1.1.30-42.el6_10.noarch.rpmd88ad93aa065d7d0801b05d47667a6480a02b8150babb245d2d81276aeea1bf1yum-updateonboot-1.1.30-42.el6_10.noarch.rpm744439503c7cdd6fabcba5c8b3659c211493fcdc37200d43a378eeb7da68511ayum-plugin-local-1.1.30-42.el6_10.noarch.rpm5438236b802e01a19009fc09e8fca032e8c18fbabfd5ec531e95f844360fc301yum-plugin-versionlock-1.1.30-42.el6_10.noarch.rpmd5c89381cb35629175ca08ae3d9967109f67d8ace618a63da20448aef577245eyum-plugin-fs-snapshot-1.1.30-42.el6_10.noarch.rpmca64823750caeae7b80c25c339523a3cea8884fadb895d717888be1ef731bde9yum-NetworkManager-dispatcher-1.1.30-42.el6_10.noarch.rpmab14ca9d1d021286724d0690feb09a42d10824510d27e1c3b9956189739b8f37yum-plugin-security-1.1.30-42.el6_10.noarch.rpm536069961e8b456087d562ee5cd1ce95b948bd2194e8e27ee9b41a109941eb60yum-plugin-protectbase-1.1.30-42.el6_10.noarch.rpm840a8471f6157337b1eb3d5263f5c4723b189f56cdac886d5077775ba2b1dc76yum-plugin-auto-update-debug-info-1.1.30-42.el6_10.noarch.rpm461825b165262e31b7ac3cc738089bdf3b722fbea899e1350232cebb4fbea934yum-plugin-priorities-1.1.30-42.el6_10.noarch.rpm837d4a10ca94d64886123262f0b7f7d434ea42119c1203b2df0f8067ac0b81d6yum-plugin-changelog-1.1.30-42.el6_10.noarch.rpm88bdf6618ba1041b898fafd1a92a23dada85a1f912e211ac81f9ea983f2281f7yum-plugin-remove-with-leaves-1.1.30-42.el6_10.noarch.rpm8445db17196626778735605a35ad2feaead7a76acef3f5d118bae40fde566dceyum-plugin-ps-1.1.30-42.el6_10.noarch.rpm384f6815b3d7299017f9fcf07a7a6a96ffb18e66d414385548fc808342e0a472yum-plugin-upgrade-helper-1.1.30-42.el6_10.noarch.rpm14eb4dcd3bfe045e929c6a10d1540acc1857b5c1bed834079683d13d021770c5yum-plugin-merge-conf-1.1.30-42.el6_10.noarch.rpm7df9ba9a494a6fe20519be5845cbd5d60d05276737171caaa1a95a92a50a360cyum-plugin-filter-data-1.1.30-42.el6_10.noarch.rpm20b47fc4d9cde1c35fdd3555b7cd4737fa865e9ad0f4edeb53a391c083c31f39yum-plugin-keys-1.1.30-42.el6_10.noarch.rpm76b09d70a6e94ca3d894d2f8c4c97eee95fe118df28fd9a5f9d0598c593ddb9dSLSA-2018:2308-1Security Fix(es): * openslp: Heap memory corruption in slpd/slpd_process.c allows denial of service or potentially code execution (CVE-2017-17833)importantScientific LinuxScientific Linux 6openslp-2.0.0-3.el6.i686.rpm1e9cc6032c5455e42fb331cee2d74c8c458b74194292f926bb5baf6173c15181openslp-server-2.0.0-3.el6.x86_64.rpm9c7007f3bd14abe5eb6a75348a03221ac5d23a8b6fd7178ad236f2e2b8fcc1b8openslp-devel-2.0.0-3.el6.i686.rpmcad2281b0054d0180d87e9187643325f0bd1bc8e5695dbb1281f25c01049dea2openslp-devel-2.0.0-3.el6.x86_64.rpmbef068007850f78d595a7a228fef89016e9f0e7d58d1ea0d270506408365c15aopenslp-2.0.0-3.el6.x86_64.rpm039f6d295b3f3f493ef618f73437ff3783eb647ae5ef5c754f71133d19cb9836SLSA-2018:2390-1Security Fix(es): * Modern operating systems implement virtualization of physical memory to efficiently use available system resources and provide inter-domain protection through access control and isolation. The L1TF issue was found in the way the x86 microprocessor designs have implemented speculative execution of instructions (a commonly used performance optimisation) in combination with handling of page-faults caused by terminated virtual to physical address resolving process. As a result, an unprivileged attacker could use this flaw to read privileged memory of the kernel or other processes and/or cross guest/host boundaries to read host memory by conducting targeted cache side-channel attacks. (CVE-2018-3620, CVE-2018-3646) * An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions past bounds check. The flaw relies on the presence of a precisely-defined instruction sequence in the privileged code and the fact that memory writes occur to an address which depends on the untrusted value. Such writes cause an update into the microprocessor's data cache even for speculatively executed instructions that never actually commit (retire). As a result, an unprivileged attacker could use this flaw to influence speculative execution and/or read privileged memory by conducting targeted cache side- channel attacks. (CVE-2018-3693) * kernel: kvm: vmx: host GDT limit corruption (CVE-2018-10901) * kernel: Use-after-free in snd_pcm_info function in ALSA subsystem potentially leads to privilege escalation (CVE-2017-0861) * kernel: Use-after-free in snd_seq_ioctl_create_port() (CVE-2017-15265) * kernel: race condition in snd_seq_write() may lead to UAF or OOB-access (CVE-2018-7566) * kernel: Race condition in sound system can lead to denial of service (CVE-2018-1000004) Bug Fix(es): * The Least recently used (LRU) operations are batched by caching pages in per-cpu page vectors to prevent contention of the heavily used lru_lock spinlock. The page vectors can hold even the compound pages. Previously, the page vectors were cleared only if they were full. Subsequently, the amount of memory held in page vectors, which is not reclaimable, was sometimes too high. Consequently the page reclamation started the Out of Memory (OOM) killing processes. With this update, the underlying source code has been fixed to clear LRU page vectors each time when a compound page is added to them. As a result, OOM killing processes due to high amounts of memory held in page vectors no longer occur.importantScientific LinuxScientific Linux 6kernel-debug-devel-2.6.32-754.3.5.el6.x86_64.rpm4c2d90b5c62123121c28c88eae5c8c9533d7789cf0c3b9919eb11ed492c0816akernel-doc-2.6.32-754.3.5.el6.noarch.rpm2d1d37b8b04c2b61f0c281324a1443f485fb142c57e294571ba002db7dc579e2python-perf-2.6.32-754.3.5.el6.x86_64.rpm925f9ed690fad6eca53ebf7116a50f93e0905186e68ae05dd7dfe6158471b7bdkernel-devel-2.6.32-754.3.5.el6.x86_64.rpm539b998a2f7e7fa4ea0200fa101c635aabb8b285b269cfe4d01b11337e30d90akernel-headers-2.6.32-754.3.5.el6.x86_64.rpm4bc4cd93aea722c8864ed151f62d57779a2abfef021dd56290402d4b7cf9598fkernel-2.6.32-754.3.5.el6.x86_64.rpm0f29163741889d87f463e528f951816afd8241c9f6737fa99a323169e66a8437kernel-firmware-2.6.32-754.3.5.el6.noarch.rpmea0a5bf9299f4878da671349438e1e1bcc90eeb8e49a93994345b5e7a9add988kernel-debug-devel-2.6.32-754.3.5.el6.i686.rpm2645c0d03833a757032aaed00226b95613411d8e48bfb9ec0b169afde88e85e3kernel-debug-2.6.32-754.3.5.el6.x86_64.rpmcb3356bb0be1ce7e4329b5e7ef3093d6b710866286d4f3a4bbf8418b3f434861perf-2.6.32-754.3.5.el6.x86_64.rpmaf7e3d794268e9d5d0ff99d938ef17ea79bf1004cff5a2252bceca1621a98c59kernel-abi-whitelists-2.6.32-754.3.5.el6.noarch.rpm3caaa45863cdd17ad054c15fe8bd32c7b1dae1a82bb3f7c7e95ec8ebc61b5e07SLSA-2018:2526-1Security Fix(es): * mutt: Remote code injection vulnerability to an IMAP mailbox (CVE-2018-14354) * mutt: Remote Code Execution via backquote characters (CVE-2018-14357) * mutt: POP body caching path traversal vulnerability (CVE-2018-14362)importantScientific LinuxScientific Linux 6mutt-1.5.20-9.20091214hg736b6a.el6.x86_64.rpmfa902145c18aefb81117cbf466f54bd9079a539fbd92da11cdab0840c868516aSLSA-2018:2571-1Security Fix(es): * bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service (CVE-2018-5740)importantScientific LinuxScientific Linux 6bind-sdb-9.8.2-0.68.rc1.el6_10.1.x86_64.rpmd0d0b46f15278e4c5a7b85763a9068b5b7ebcc185c4f37dd0de6ca376c59cc95bind-utils-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm30d6f78ef1a742d40bd973ebe4e4c974dae0f7c08d3fe91287ce50d042a67157bind-libs-9.8.2-0.68.rc1.el6_10.1.x86_64.rpme2ab23a24ad97f1b2b9c668eb029f429612ed3ac89103d7e0aa511abc918e862bind-devel-9.8.2-0.68.rc1.el6_10.1.x86_64.rpm2c0234bf1d22cd721f1ad4972f38767c736e95ed031d3f2b0de0b4122e95387abind-9.8.2-0.68.rc1.el6_10.1.x86_64.rpmceee9f4b1da65dfc49721f936064f1681ccf5edcd106a612f14ea7b44986ca81bind-libs-9.8.2-0.68.rc1.el6_10.1.i686.rpm20c898d58c1d3548fe3fc6e1401e5d3ed4354f0cbf1f8870afd6320fa8764562bind-devel-9.8.2-0.68.rc1.el6_10.1.i686.rpm8ce80c47c82c6fce7ca1492c1d901606ed4384cfc5a4e446e86ab5d2c4a60c55bind-chroot-9.8.2-0.68.rc1.el6_10.1.x86_64.rpmca4535e8a75afed686936359e558abcb55c25dff9411d964ece5fa4a70690f2f