OracleVM 3.3 : libXfont (OVMSA-2015-0120)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2015-1802: missing range check in bdfReadProperties bug 1258892 - CVE-2015-1803: crash on invalid read in bdfReadCharacters bug 1258892 - CVE-2015-1804: out-of-bounds memory access in...

OracleVM 3.3 : nss-softokn (OVMSA-2015-0118)

The remote OracleVM system is missing necessary patches to address critical security updates : - Pick up upstream freebl patch for CVE-2015-2730 - Check for P == Q or P ==-Q before adding P and Q %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted...

OracleVM 3.3 : pam (OVMSA-2015-0117)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2015-3238 - DoS due to blocking pipe with very long password - make pampwhistory and pamunix tolerant of opasswd file corruption - pamuserdb: allow any crypt hash algorithm to be used 1119289 ...

OracleVM 3.3 : net-snmp (OVMSA-2015-0116)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - Fixed parsing of invalid variables in incoming packets 1248410 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this...

OracleVM 3.3 : sqlite (OVMSA-2015-0115)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add patch for compiler warnings highlighted by rpmdiff. Related: rhbz1244727 - fix for CVE-2015-3416 Resolves: 1244727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0114)

The remote OracleVM system is missing necessary patches to address critical security updates : - udp: fix behavior of wrong checksums Eric Dumazet Orabug: 21628850 CVE-2015-5364 CVE-2015-5366 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted fro...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0113)

The remote OracleVM system is missing necessary patches to address critical security updates : - md: use kzalloc when bitmap is disabled Benjamin Randazzo Orabug: 21563041 CVE-2015-5697 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from...

OracleVM 3.2 : xen (OVMSA-2015-0112)

The remote OracleVM system is missing necessary patches to address critical security updates in xen. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2015-0112. include'deprecatednasllevel.inc';...

OracleVM 3.3 : xen (OVMSA-2015-0111)

The remote OracleVM system is missing necessary patches to address critical security updates in xen %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2015-0111. include'deprecatednasllevel.inc';...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0109)

The remote OracleVM system is missing necessary patches to address critical security updates in kernel-uek. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2015-0109. include'deprecatednasllevel.inc';...

OracleVM 3.3 : python (OVMSA-2015-0098)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle Linux distribution in platform.py orabug 21288328 Keshav Sharma - Enable use of deepcopy with instance methods Resolves: rhbz1223037 - Since -libs now provide python-ordered dict, added...

OracleVM 3.3 : ntp (OVMSA-2015-0102)

The remote OracleVM system is missing necessary patches to address critical security updates : - reject packets without MAC when authentication is enabled CVE-2015-1798 - protect symmetric associations with symmetric key against DoS attack CVE-2015-1799 - fix generation of MD5 keys with ntp-keyge...

OracleVM 3.3 : grep (OVMSA-2015-0100)

The remote OracleVM system is missing necessary patches to address critical security updates : - Updated pcre buildrequires to require pcre-devel = 7.8-7 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.3 : bind (OVMSA-2015-0105)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix CVE-2015-5477 - Fix CVE-2015-4620 - Resolves: 1215687 - DNS resolution failure in high load environment with SERVFAIL and 'out of memory/success' in the log - Fix CVE-2015-1349 - Enable RPZ-NSIP a...

OracleVM 3.3 : curl (OVMSA-2015-0107)

The remote OracleVM system is missing necessary patches to address critical security updates : - require credentials to match for NTLM re-use CVE-2015-3143 - close Negotiate connections when done CVE-2015-3148 - reject CRLFs in URLs passed to proxy CVE-2014-8150 - use only full matches for hosts...

OracleVM 3.3 : kernel-uek (OVMSA-2015-0104)

The remote OracleVM system is missing necessary patches to address critical security updates : - KVM: x86: SYSENTER emulation is broken Nadav Amit Orabug: 21502739 CVE-2015-0239 CVE-2015-0239 - fs: take imutex during preparebinprm for setugid executables Jann Horn Orabug: 21502254 CVE-2015-3339 -...

OracleVM 3.3 : libxml2 (OVMSA-2015-0097)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball - CVE-2015-1819 Enforce the reader to run in constant memoryrhbz1214163 - Stop parsing on entities...

OracleVM 3.3 : libuser (OVMSA-2015-0106)

The remote OracleVM system is missing necessary patches to address critical security updates : - Update CVE-2015-3246 patch based on review comments Resolves: 1235518 - Don&rsquo t use 512-bit RSA private keys in tests Related: 1235518 - Fix testsuite failures if more than one architecture is...

OracleVM 3.3 : sudo (OVMSA-2015-0103)

The remote OracleVM system is missing necessary patches to address critical security updates : - RHEL-6.7 erratum - modified the authlogicfix patch to fix 1144448 - fixed a bug in the ldapusermatchfix patch Resolves: rhbz1144448 Resolves: rhbz1142122 - RHEL-6.7 erratum - fixed the...

OracleVM 3.3 : gnutls (OVMSA-2015-0101)

The remote OracleVM system is missing necessary patches to address critical security updates : - fix CVE-2015-0282 1198159 - fix CVE-2015-0294 1198159 - Corrected value initialization in mpi printing 1129241 - Check for expiry information in the CA certificates 1159778 - fix issue with integer...