OracleVM 3.3 / 3.4 : ghostscript (OVMSA-2018-0285)

The remote OracleVM system is missing necessary patches to address critical security updates : - It was found that the fix for CVE-2018-16509 was not complete, the missing pieces added into ghostscript-CVE-2018-16509.patch - Resolves: 1641124 - CVE-2018-16509 ghostscript: /invalidaccess bypass...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0284)

The remote OracleVM system is missing necessary patches to address critical security updates : - Revert commit 8bd274934987 'block: fix bdi vs gendisk lifetime mismatch' Ashish Samant Orabug: 28968102 - KVM/x86: Add IBPB support Ashok Raj Orabug: 28703712 - x86/intel/spectrev2: Remove unnecessary...

OracleVM 3.4 : xen (OVMSA-2018-0282) (Foreshadow) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0282 for details. C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0282...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0273)

The remote OracleVM system is missing necessary patches to address critical security updates : - hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:447! Mike Kravetz - scsi: libsas: fix memory leak in sassmpgetphyevents Jason Yan Orabug: 27927687 CVE-2018-7757 - KVM: vmx: shadow more fields that a...

OracleVM 3.3 : xen (OVMSA-2018-0271) (Foreshadow) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0271 for details. C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0271...

OracleVM 3.2 : xen (OVMSA-2018-0272) (Foreshadow) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0272 for details. C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0272...

OracleVM 3.3 / 3.4 : python-paramiko (OVMSA-2018-0270)

The remote OracleVM system is missing necessary patches to address critical security updates : - Split handler tables for server and client side - Fix CVE-2018-1000805 - Resolves: rhbz1637365 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security...

OracleVM 3.3 / 3.4 : nss (OVMSA-2018-0264)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed - Backport upstream fix for CVE-2018-12384 - Remove nss-lockcert-api-change.patch, which...

OracleVM 3.4 : glusterfs (OVMSA-2018-0263)

The remote OracleVM system is missing necessary patches to address critical security updates : - fixes bugs bz1524336 bz1622029 bz1622452 - fixes bugs bz1615578 bz1619416 bz1619538 bz1620469 bz1620765 - fixes bugs bz1569657 bz1608352 bz1609163 bz1609724 bz1610825 bz1611151 bz1612098 bz1615338...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0261)

The remote OracleVM system is missing necessary patches to address critical security updates : - exec: Limit arg stack to at most 75% of STKLIM Kees Cook Orabug: 28709994 CVE-2018-14634 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Adviso...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0258)

The remote OracleVM system is missing necessary patches to address critical security updates : - nsfs: mark dentry with DCACHERCUACCESS Cong Wang Orabug: 28576290 CVE-2018-5873 - dm crypt: add middle-endian variant of plain64 IV Konrad Rzeszutek Wilk Orabug: 28604628 - IB/ipoib: Improve filtering...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0256)

The remote OracleVM system is missing necessary patches to address critical security updates : - tcp: add tcpoootrycoalesce helper Eric Dumazet Orabug: 28639707 CVE-2018-5390 - tcp: call tcpdrop from tcpdataqueueofo Eric Dumazet Orabug: 28639707 CVE-2018-5390 - tcp: detect malicious patterns in...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0254) (Foreshadow)

The remote OracleVM system is missing necessary patches to address critical security updates : Oracle VM Security Advisory OVMSA-2018-0254 The following updated rpms for Oracle VM 3.4 have been uploaded to the Unbreakable Linux Network : x8664: kernel-uek-4.1.12-124.19.1.el6uek.x8664.rpm...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0253)

The remote OracleVM system is missing necessary patches to address critical security updates : - rebuild bumping release - Cipso: cipsov4optptr enter infinite loop yujuan.qi Orabug: 28563992 CVE-2018-10938 - Btrfs: fix listadd corruption and soft lockups in fsync Liu Bo - x86/paravirt: Fix...

OracleVM 3.3 / 3.4 : bind (OVMSA-2018-0252)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2018-5740 - Fix CVE-2017-3145 - Change EDNS flags only after successful query 1416035 - Fix crash in ldap driver at bind-sdb stop 1426626 - Fix CVE-2017-3142, CVE-2017-3143 - Update root serve...

OracleVM 3.4 : xen (OVMSA-2018-0251) (Foreshadow)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: xen commit=18ec2b68e519646188fd26a05b2cd26ebd829035 - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff - BUILDINFO: QEMU traditional...

OracleVM 3.4 : xen (OVMSA-2018-0248) (Bunker Buster) (Foreshadow) (Meltdown) (POODLE) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0248 for details. C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0248...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0247) (Foreshadow)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0247 for details. C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0247...

OracleVM 3.4 : xen (OVMSA-2018-0246) (Foreshadow)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=02cec92b3eb1612e37616b10400d82f1e3d8de85 - BUILDINFO: QEMU upstream...

OracleVM 3.3 / 3.4 : gnupg2 (OVMSA-2018-0239)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2018-12020 - missing sanitization of original filename C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0239...