OracleVM 3.4 : xen (OVMSA-2020-0027) (deprecated)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=077233184260bd831e7c4afdd4aebb0bced6ee32 - BUILDINFO: QEMU upstream...

OracleVM 3.3 / 3.4 : microcode_ctl (OVMSA-2020-0026) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : - update 06-2d-07 to 0x71a - update 06-55-04 to 0x2006906 - update 06-55-07 to 0x5002f01 - merge Oracle changes for early load via dracut - enable late load on install for UEK4 kernels marked safe excep...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0020) (Stack Clash)

The remote OracleVM system is missing necessary patches to address critical security updates : - Input: ff-memless - kill timer in destroy Oliver Neukum Orabug: 31213691 CVE-2019-19524 - libertas: Fix two buffer overflows at parsing bss descriptor Wen Huang Orabug: 31351307 CVE-2019-14896...

OracleVM 3.3 / 3.4 : bind (OVMSA-2020-0021)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0021 for details. C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2020-0021...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2020-0019)

The remote OracleVM system is missing necessary patches to address critical security updates : - KVM: x86: Remove spurious semicolon Joao Martins Orabug: 31413782 - genirq: Use rcu in kstatirqsusr Eric Dumazet - genirq: Make sparseirqlock protect what it should protect Thomas Gleixner Orabug:...

OracleVM 3.4 : xen (OVMSA-2020-0018)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=8e468e57b8bc1a7f84b4a7a6abf9e420b97313fa - BUILDINFO: QEMU upstream...

OracleVM 3.3 : ipmitool (OVMSA-2020-0012)

The remote OracleVM system is missing necessary patches to address critical security updates : - Backport fix for CVE-2020-5208 - Fix missing return in ipmikontronoemmain - CID1261317 - rebase to latest stable upstream version - resolves: rhbz1253416 - remove the redundant OpenIMPI dependency -...

OracleVM 3.4 : qemu-kvm (OVMSA-2020-0010)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm-Fix-heap-overflow-in-ipreass-on-big-packet-input.pa tch bz1734747 - kvm-Using-ipdeq-after-mfree-might-read-pointers-from-a .patch - kvm-tcpemu-Fix-oob-access.patch bz1791558 -...

OracleVM 3.4 : freetype (OVMSA-2020-0001)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fix potential buffer overflow - Resolves: 1767863 - Fix potential buffer overflow - Resolves: 1758402 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0056)

The remote OracleVM system is missing necessary patches to address critical security updates : - ocfs2: protect extent tree in ocfs2prepareinodeforwrite Shuning Zhang Orabug: 30036349 - ocfs2: direct-IO: protect getblocks Junxiao Bi Orabug: 30036349 - SUNRPC: Remove xprtconnectstatus Trond...

OracleVM 3.4 : xen (OVMSA-2019-0054)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8 - BUILDINFO: xen commit=a3ec6768f487946b7316364bc9bd17ce4d752af5 - BUILDINFO: QEMU upstream...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0052)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/tsx: Add config options to set tsx=on|off|auto Michal Hocko Orabug: 30419233 CVE-2019-11135 - x86/speculation/taa: Add documentation for TSX Async Abort Pawan Gupta Orabug: 30419233 CVE-2019-11135...

OracleVM 3.3 / 3.4 : sudo (OVMSA-2019-0050)

The remote OracleVM system is missing necessary patches to address critical security updates : - Fixes OraBug: 28747380 sudo does not honor envkeep-='KRB5CCNAME' after 'sudo -k' - RHEL-6.10.z ERRATUM - fixed CVE-2019-14287 Resolves: rhbz1760684 C Tenable Network Security, Inc. The package checks ...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0047)

The remote OracleVM system is missing necessary patches to address critical security updates : - scsi: sg: fixup infoleak when using SGGETREQUESTTABLE Hannes Reinecke Orabug: 26941755 CVE-2017-14991 - failover: allow name change on IFFUP slave interfaces Si-Wei Liu - Revert 'netfailover: delay...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0046)

The remote OracleVM system is missing necessary patches to address critical security updates : - NFSv4: Don't try to reclaim unused state owners Trond Myklebust - x86/microcode: Update late microcode in parallel Ashok Raj Orabug: 30302412 - floppy: fix out-of-bounds read in copybuffer Denis Efrem...

OracleVM 3.4 : qemu-kvm (OVMSA-2019-0045)

The remote OracleVM system is missing necessary patches to address critical security updates : - kvm-slirp-fix-big-little-endian-conversion-in-ident-prot .patch - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t .patch - kvm-slirp-don-t-manipulate-sorcv-in-tcpemu.patch bz1669066 -...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0044)

The remote OracleVM system is missing necessary patches to address critical security updates : - KVM: coalescedmmio: add bounds checking Matt Delco Orabug: 30318042 CVE-2019-14821 CVE-2019-14821 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Securi...

OracleVM 3.4 : openssl (OVMSA-2019-0040)

The remote OracleVM system is missing necessary patches to address critical security updates : - Oracle bug 28730228: backport CVE-2018-0732 - Oracle bug 28758493: backport CVE-2018-0737 - Merge upstream patch to fix CVE-2018-0739 - Avoid out-of-bounds read. Fixes CVE-2017-3735. By Rich Salz -...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0039)

The remote OracleVM system is missing necessary patches to address critical security updates : - xen: let allocxenballoonedpages fail if not enough memory free Juergen Gross Orabug: 30073695 - mm/pagealloc.c: calculate 'available' memory in a separate function Igor Redko Orabug: 30073695 - Input:...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0038)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/speculation: Exclude ATOMs from speculation through SWAPGS Thomas Gleixner Orabug: 29967571 CVE-2019-1125 - x86/speculation: Enable Spectre v1 swapgs mitigations Josh Poimboeuf Orabug: 29967571...