Stay Secure with the Latest Linux Advisories

security advisorylow severityscientific linux

Scientific Linux: SLSA-2015:2237-3 Low: librest Crash Risk

Low: rest security update. Date: Mon, 21 Dec 2015 23:16:15 +0000 Reply-To: scientific-linux-users@ Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Low: rest on SL7.x x86_64 MIME-Version: 1.0 Message-ID: Synopsis: Low: rest security update Advisory ID: SLSA-2015:2237-3 Issue Date: 2015-11-19 CVE Numbers: CVE-2015-2675 -- It was found that the OAuth implementation in librest, a helper library for RESTful services, incorrectly truncated the pointer returned by the rest_proxy_call_get_url call. An attacker could use this flaw to crash an application using the librest library. (CVE-2015-2675) After installing the update, all applications using librest must be restarted for the update to take effect. -- SL7 x86_64 rest-0.7.92-3.el7.i686.rpm rest-0.7.92-3.el7.x86_64.rpm rest-debuginfo-0.7.92-3.el7.i686.rpm rest-debuginfo-0.7.92-3.el7.x86_64.rpm rest-devel-0.7.92-3.el7.i686.rpm rest-devel-0.7.92-3.el7.x86_64.rpm - Scientific Linux Development Team . A recent security patch for Scientific Linux resolves a minor vulnerability associated with the OAuth protocol's setup.. Scientific Linux Security, Update Rest, Librest Vulnerability, Low Severity Patch, OAuth Implementation Fix. . Severity: Low. LinuxSecurity.com Team

Dec 21, 2015 •Low Scientific Linux