远程 OracleVM 系统缺少解决关键安全更新的必要补丁：

  - BUILDINFO：OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8

  - BUILDINFO：xen commit=3885a020649df84b883ea20d11ca15b7d7640201

  - BUILDINFO：QEMU 上游 commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff

  - BUILDINFO：传统 QEMU commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba

  - BUILDINFO：IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e

  - BUILDINFO：SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee

  - x86/HVM：请勿给人以 WRMSR 成功的错误印象（根用户） 

  - BUILDINFO：OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8

  - BUILDINFO：xen commit=71714f34026c4e0b105bf2def8d2dc4c7171d5b8

  - BUILDINFO：QEMU 上游 commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff

  - BUILDINFO：传统 QEMU commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba

  - BUILDINFO：IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e

  - BUILDINFO：SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee

  - Red-tape：使用 XSA-297 的新 CVE 更新 repo (Patrick Colp) [Orabug：29725297] (CVE-2019-11091)

  - x86/spec-ctl：向客户机泄露 X86_FEATURE_MD_CLEAR (Patrick Colp) [Orabug：29677162] (CVE-2018-12126) (CVE-2018-12127) (CVE-2018-12130)

  - x86/spec-ctrl：引入选项以控制 VERW 刷新 (Andrew Cooper) [Orabug：2977162] (CVE-2018-12126) (CVE-2018-12127) (CVE-2018-12130) (CVE-2018-12126) (CVE-2018-12127) (CVE-2018-12130)

  - x86/spec-ctrl：使用 VERW 刷新管道缓冲区的基础架构 (Andrew Cooper) [Orabug：29677162] (CVE-2018-12126) (CVE-2018-12127) (CVE-2018-12130) (CVE-2018-12126) (CVE-2018-12127) (CVE-2018-12130)

  - x86/spec-ctrl：微架构数据采样的 CPUID/MSR 定义 (Andrew Cooper) [Orabug：29677162] (CVE-2018-12126) (CVE-2018-12127) (CVE-2018-12130) (CVE-2018-12126) (CVE-2018-12127) (CVE-2018-12130)

  - BUILDINFO：OVMF commit=173bf5c847e3ca8b42c11796ce048d8e2e916ff8

  - BUILDINFO：xen commit=0d8ecd7732e56484c10e4b584de17d360d940252

  - BUILDINFO：QEMU 上游 commit=8bff6989bd0bafcc0ddf859c23ce6a2ff21a80ff

  - BUILDINFO：传统 QEMU commit=346fdd7edd73f8287d0d0a2bab9c67b71bc6b8ba

  - BUILDINFO：IPXE commit=9a93db3f0947484e30e753bbd61a10b17336e20e

  - BUILDINFO：SeaBIOS commit=7d9cbe613694924921ed1a6f8947d711c5832eee

  - Config：更新 git 链接以使用 linux-git.us.oracle.com (Patrick Colp) 

  - gnttab：为 copy-on-grant-transfer 设置页面引用计数

检测

OracleVM 3.4：xen (OVMSA-2019-0016) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

medium Nessus 插件 ID 125104

版本 1.5