OracleVM 3.3 / 3.4 : glibc (OVMSA-2017-0051)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update newmode size to fix a possible corruption - Fix AFINET6 getaddrinfo with nscd 1416496 - Update tests for struct sockaddrstorage changes 1338673 - Use FLCLOEXEC in internal calls to fopen 101234...

OracleVM 3.3 / 3.4 : openssh (OVMSA-2017-0053)

The remote OracleVM system is missing necessary patches to address critical security updates : - Allow to use ibmca crypto hardware 1397547 - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1405374 - Fix missing hmac-md5-96 from server offer 1373836 - Prevent...

OracleVM 3.4 : qemu-kvm (OVMSA-2017-0055)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm-cirrus-fix-patterncopy-checks.patch bz1420487 bz1420489 - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil .patch - kvm-cirrus-add-blitisunsafe-call-to-cirrusbitbltcput .patch - Resolves:...

OracleVM 3.3 / 3.4 : gnutls (OVMSA-2017-0054)

The remote OracleVM system is missing necessary patches to address critical security updates : - Upgraded to 2.12.23 to incorporate multiple TLS 1.2 fixes 1326389, 1326073, 1323215, 1320982, 1328205, 1321112 - Modified gnutls-serv to accept --sni-hostname 1333521 - Modified gnutls-serv to always...

OracleVM 3.3 / 3.4 : ocaml (OVMSA-2017-0049)

The remote OracleVM system is missing necessary patches to address critical security updates : - Enable execshield stack protection on ppc/ppc64 572826 related: rhbz1343082 - Fix strict-aliasing warnings in build 990540. - Fix buffer overflow and information leak CVE-2015-8869 resolves: rhbz13430...

OracleVM 3.3 / 3.4 : bash (OVMSA-2017-0050)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix signal handling in read builtin Resolves: 1421926 - CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd Resolves: 1396383 - CVE-2016-7543 - Fix for arbitrary code execution via...

OracleVM 3.3 / 3.4 : openjpeg (OVMSA-2017-0048)

The remote OracleVM system is missing necessary patches to address critical security updates : - Revert previous changes in patch for CVE-2016-5159 - Fix double free in patch for CVE-2016-5139 - Fix memory leaks and invalid read in ciobytein Related: 1419775 - Add two more allocation checks to...

OracleVM 3.4 : qemu-kvm (OVMSA-2017-0047)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm-cirrus-fix-patterncopy-checks.patch bz1420486 bz1420488 - kvm-Revert-cirrus-allow-zero-source-pitch-in-pattern-fil .patch - kvm-cirrus-add-blitisunsafe-call-to-cirrusbitbltcput .patch - Resolves:...

OracleVM 3.4 : qemu-kvm (OVMSA-2017-0043)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm-cirrusvga-fix-division-by-0-for-color-expansion-rop .patch - kvm-cirrusvga-fix-off-by-one-in-blitregionisunsafe.p atch - kvm-display-cirrus-check-vga-bits-per-pixel-bpp-value.pa tch -...

OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0046)

The remote OracleVM system is missing necessary patches to address critical security updates : - dccp: fix freeing skb too early for IPV6RECVPKTINFO Andrey Konovalov Orabug: 25598277 CVE-2017-6074 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracte...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0044)

The remote OracleVM system is missing necessary patches to address critical security updates : - dccp: fix freeing skb too early for IPV6RECVPKTINFO Andrey Konovalov Orabug: 25598257 CVE-2017-6074 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracte...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0045)

The remote OracleVM system is missing necessary patches to address critical security updates : - dccp: fix freeing skb too early for IPV6RECVPKTINFO Andrey Konovalov CVE-2017-6074 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM...

OracleVM 3.3 / 3.4 : openssl (OVMSA-2017-0042)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0040)

The remote OracleVM system is missing necessary patches to address critical security updates : - crypto: algifhash - Only export and import on sockets with data Herbert Xu Orabug: 25417805 CVE-2016-8646 - USB: usbfs: fix potential infoleak in devio Kangjie Lu Orabug: 25462760 CVE-2016-4482 - net:...

OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0041)

The remote OracleVM system is missing necessary patches to address critical security updates : - vfs: read filehandle only once in handletopath Sasha Levin Orabug: 25388709 CVE-2015-1420 - crypto: algifhash - Only export and import on sockets with data Herbert Xu Orabug: 25417807 - USB: usbfs: fi...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0039)

The remote OracleVM system is missing necessary patches to address critical security updates : - vfio/pci: Fix integer overflows, bitmask check Vlad Tsyrklevich Orabug: 25164094 CVE-2016-9083 CVE-2016-9084 - Don't feed anything but regular iovec's to blkrqmapuseriov Linus Torvalds Orabug: 2523193...

OracleVM 3.3 / 3.4 : ntp (OVMSA-2017-0038)

The remote OracleVM system is missing necessary patches to address critical security updates : - add disable monitor to default ntp.conf CVE-2013-5211 - don't limit rate of packets from sources CVE-2016-7426 - don't change interface from received packets CVE-2016-7429 - fix calculation of root...

OracleVM 3.4 : libtiff (OVMSA-2017-0036)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix patch for CVE-2016-5652 - Related: 1412078 - Fix CWE-476 defect found by covscan - Related: 1412078 - Add patches for CVEs : - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 - CVE-2016-9536 CVE-2016-95...

OracleVM 3.3 : libtiff (OVMSA-2017-0037)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix patch for CVE-2016-5652 - Related: 1412078 - Fix CWE-476 defect found by covscan - Related: 1412078 - Add patches for CVEs : - CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 - CVE-2016-9536 CVE-2016-95...

OracleVM 3.3 / 3.4 : mysql (OVMSA-2017-0035)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix date in the test - Fix CVE-2016-6662, CVE-2016-6663 Resolves: 1397309 - Fixed reloadaclandcache Resolves: 1281370 - Add support for TLSv1.1 and TLSv1.2 - Fixed test events1 end date in past...