OracleVM 3.2 : xen (OVMSA-2016-0172)

The remote OracleVM system is missing necessary patches to address critical security updates : - qemu: ioportread, ioportwrite: be defensive about 32-bit addresses On x86, ioport addresses are 16-bit. That these functions take 32-bit arguments is a mistake. Changing the argument type to 16-bit wi...

OracleVM 3.3 / 3.4 : sudo (OVMSA-2016-0170)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update noexec syscall blacklist - Fixes CVE-2016-7032, CVE-2016-7076 Resolves: rhbz1391937 - RHEL-6.8 erratum - fixed a bug causing that non-root users can list privileges of other users Resolves:...

OracleVM 3.3 / 3.4 : expat (OVMSA-2016-0168)

The remote OracleVM system is missing necessary patches to address critical security updates : - updated security fix for CVE-2016-0718 - add security fix for CVE-2016-0718 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security...

OracleVM 3.2 : Unbreakable / etc (OVMSA-2016-0167)

The remote OracleVM system is missing necessary patches to address critical security updates : - aacraid: Check size values after double-fetch from user Dave Carroll Orabug: 25060055 CVE-2016-6480 CVE-2016-6480 - audit: fix a double fetch in auditlogsingleexecvearg Paul Moore Orabug: 25059962...

OracleVM 3.2 : xen (OVMSA-2016-0166)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0166 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.3 : xen (OVMSA-2016-0165)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0165 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.4 : xen (OVMSA-2016-0164)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: commit=5e4dc2c5fbd14b065234c0b5e5b637e0e005fab7 - pygrub: Properly quote results, when returning them to the caller: Ian Jackson Orabug: 25094263 CVE-2016-9379 CVE-2016-9380 - x86emul: fix...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0162)

The remote OracleVM system is missing necessary patches to address critical security updates : - acpi: Disable ACPI table override if securelevel is set Linn Crosetto Orabug: 25058966 CVE-2016-3699 - aacraid: Check size values after double-fetch from user Dave Carroll Orabug: 25060060 CVE-2016-64...

OracleVM 3.2 : Unbreakable / etc (OVMSA-2016-0158) (Dirty COW)

The remote OracleVM system is missing necessary patches to address critical security updates : - mm, gup: close FOLL MAPPRIVATE race Linus Torvalds Orabug: 24928646 CVE-2016-5195 - HID: hiddev: validate numvalues for HIDIOCGUSAGES, HIDIOCSUSAGES commands Scott Bauer Orabug: 24798694 CVE-2016-5829...

OracleVM 3.2 : nss (OVMSA-2016-0160)

The remote OracleVM system is missing necessary patches to address critical security updates : - Mozilla 1314604 / Red Hat CVE-2016-8635 - Rebase to NSS 3.21.3 - Resolves: Bug 1347908 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from Oracle...

OracleVM 3.3 / 3.4 : nssnss-util (OVMSA-2016-0159)

The remote OracleVM system is missing necessary patches to address critical security updates : nss - Added nss-vendor.patch to change vendor - Mozilla 1314604 / Red Hat CVE-2016-8635 - remove disablehwgcm.patch which hasn't been used since 3.16.1 - Rebase to NSS 3.21.3 - Resolves: 1383885 nss-uti...

OracleVM 3.3 / 3.4 : policycoreutils (OVMSA-2016-0157)

The remote OracleVM system is missing necessary patches to address critical security updates : - Lazy unmount private, shared entryJoe Jinorabug 12560705 - sandbox: create a new session for sandboxed processes Resolves: CVE-2016-7545 - Update translations Resolves: rhbz819794 - Fix sepolgen test...

OracleVM 3.3 / 3.4 : libgcrypt (OVMSA-2016-0156)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2016-6313 - predictable PRNG output 1366105 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-015...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0154)

The remote OracleVM system is missing necessary patches to address critical security updates : - sched: panic on corrupted stack end Jann Horn Orabug: 24971921 CVE-2016-1583 - ecryptfs: forbid opening files without mmap handler Jann Horn Orabug: 24971921 CVE-2016-1583 - proc: prevent stacking...

OracleVM 3.3 : Unbreakable / etc (OVMSA-2016-0155)

The remote OracleVM system is missing necessary patches to address critical security updates : - ecryptfs: forbid opening files without mmap handler Jann Horn Orabug: 24971919 CVE-2016-1583 - RDS: IB: fix panic with handlers running post teardown Santosh Shilimkar Orabug: 24395795 %NASLMINLEVEL...

OracleVM 3.2 : bind (OVMSA-2016-0153)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-8864 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0153. include'deprecatednasllevel.inc...

OracleVM 3.3 / 3.4 : bind (OVMSA-2016-0152)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-8864 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0152. include'deprecatednasllevel.inc...

OracleVM 3.3 / 3.4 : ovm-consoled (OVMSA-2016-0151)

The remote OracleVM system is missing necessary patches to address critical security updates : - Prevent future socat changes that introduces defect which accepts any remote connection. Ackownledged by Zhigang Wang bug 24906519 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package chec...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2016-0149) (Dirty COW)

The remote OracleVM system is missing necessary patches to address critical security updates : - mm: remove gupflags FOLLWRITE games from getuserpages Linus Torvalds Orabug: 24927306 CVE-2016-5195 - drivers/nvme: provide a module parameter for setting number of I/O queues Shan Hai Orabug: 2491495...

OracleVM 3.3 / 3.4 : bind (OVMSA-2016-0145)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2016-2848 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2016-0145. include'deprecatednasllevel.inc...