OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0143)

The remote OracleVM system is missing necessary patches to address critical security updates : - dentry name snapshots Al Viro Orabug: 26630936 CVE-2017-7533 - scsi: libiscsi: use kvzalloc for iscsipoolinit Kyle Fortin - mm: introduce kvmzalloc helpers Kyle Fortin Orabug: 26621191 - KEYS: Disallo...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0127)

The remote OracleVM system is missing necessary patches to address critical security updates : - posixacl: Clear SGID bit when setting file permissions Jan Kara Orabug: 25507344 CVE-2016-7097 CVE-2016-7097 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0126) (Stack Clash)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0126 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.2 : sudo (OVMSA-2017-0125)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2017-1000368 - Fix CVE-2017-1000367 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2017-0125...

OracleVM 3.2 : glibc (OVMSA-2017-0124) (Stack Clash)

The remote OracleVM system is missing necessary patches to address critical security updates : - Mitigation for CVE-2017-1000366 glibc: heap/stack gap jumping via unbounded stack allocations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted fro...

OracleVM 3.3 / 3.4 : bind (OVMSA-2017-0122)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2017-3142, CVE-2017-3143 - Update root servers and trust anchors 1458234 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM...

OracleVM 3.4 : xen (OVMSA-2017-0116)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: xen commit=74b662e79bc874fe8ad8a93d2891e6569c380004 - BUILDINFO: QEMU upstream commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff - BUILDINFO: QEMU traditional...

OracleVM 3.2 : xen (OVMSA-2017-0118)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0118 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0119)

The remote OracleVM system is missing necessary patches to address critical security updates : - macsec: dynamically allocate space for sglist Jason A. Donenfeld Orabug: 26368162 CVE-2017-7477 - macsec: avoid heap overflow in skbtosgvec Jason A. Donenfeld Orabug: 26368162 CVE-2017-7477 - nfsd:...

OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0121)

The remote OracleVM system is missing necessary patches to address critical security updates : - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366024 CVE-2017-7645 - dm mpath: allow ioctls to trigger pg init Mikulas Patocka Orabug: 25645229 - xen/manage: Always freeze/tha...

OracleVM 3.3 : xen (OVMSA-2017-0117)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0117 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0120)

The remote OracleVM system is missing necessary patches to address critical security updates : - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366022 CVE-2017-7645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0115) (Stack Clash)

The remote OracleVM system is missing necessary patches to address critical security updates : - mm: fix new crash in unmappedareatopdown Hugh Dickins Orabug: 26326143 CVE-2017-1000364 - mm: larger stack guard gap, between vmas Hugh Dickins Orabug: 26326143 CVE-2017-1000364 %NASLMINLEVEL 70300 C...

OracleVM 3.3 / 3.4 : sudo (OVMSA-2017-0114)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fixes CVE-2017-1000368 Resolves: rhbz1459408 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2017-0114...

OracleVM 3.3 / 3.4 : glibc (OVMSA-2017-0113)

The remote OracleVM system is missing necessary patches to address critical security updates : - backport rh patch 1047983 from OL7, Orabug 25407655 - Avoid large allocas in the dynamic linker 1452711 - Fix thread cancellation issues for setmntent and others 1437618. %NASLMINLEVEL 70300 C Tenable...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0111)

The remote OracleVM system is missing necessary patches to address critical security updates : - net/packet: fix overflow in check for tpreserve Andrey Konovalov Orabug: 26143545 CVE-2017-7308 - net/packet: fix overflow in check for tpframenr Andrey Konovalov Orabug: 26143545 CVE-2017-7308 -...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0112)

The remote OracleVM system is missing necessary patches to address critical security updates : - net/packet: fix overflow in check for tpreserve Andrey Konovalov Orabug: 26143552 CVE-2017-7308 - net/packet: fix overflow in check for tpframenr Andrey Konovalov Orabug: 26143552 CVE-2017-7308 -...

OracleVM 3.3 / 3.4 : nss (OVMSA-2017-0109)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed - Fix zero-length record treatment for stream ciphers and SSLv2 - Include CKBI 2.14 and...

OracleVM 3.3 / 3.4 : sudo (OVMSA-2017-0110)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fixes CVE-2017-1000367 Resolves: rhbz1455399 - Update noexec syscall blacklist - Fixes CVE-2016-7032, CVE-2016-7076 Resolves: rhbz1391938 - RHEL-6.9 erratum - Fix race condition when creating...

OracleVM 3.3 / 3.4 : rpcbind (OVMSA-2017-0107)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix for CVE-2017-8779 bz 1449461 - Soft static allocate rpc uid/gid bz 1300533 - Fix memory corruption in PMAPCALLIT code bz 1186933 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package...