OracleVM 3.3 : nss (OVMSA-2017-0156)

High Nessus Plugin ID 103593

Synopsis

The remote OracleVM host is missing one or more security updates.

Description

The remote OracleVM system is missing necessary patches to address critical security updates :

- Added nss-vendor.patch to change vendor

- Temporarily disable some tests until expired PayPalEE.cert is renewed

- Backport patch to simplify transcript calculation for CertificateVerify

Solution

Update the affected nss / nss-sysinit / nss-tools packages.

See Also

http://www.nessus.org/u?a57ea91d

Plugin Details

Severity: High

ID: 103593

File Name: oraclevm_OVMSA-2017-0156.nasl

Version: $Revision: 3.1 $

Type: local

Published: 2017/10/02

Modified: 2017/10/02

Dependencies: 12634

Risk Information

Risk Factor: High

Vulnerability Information

CPE: p-cpe:/a:oracle:vm:nss, p-cpe:/a:oracle:vm:nss-sysinit, p-cpe:/a:oracle:vm:nss-tools, cpe:/o:oracle:vm_server:3.3

Required KB Items: Host/local_checks_enabled, Host/OracleVM/release, Host/OracleVM/rpm-list

Patch Publication Date: 2017/09/29