# ELSA-2019-1175: Security update for 96 packages

ELSA-2019-1175, released July 30, 2019, fixes 9 CVEs across 96 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/elsa-2019-1175
- Platform: Linux
- Released: Jul 30, 2019
- Priority: High (Closes CVE-2019-3855, high severity)
- CVEs: 9, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2019-1175.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [hivex](https://patchblox.com/security/data/product/linux/hivex.md) | ol 8 | 0:1.3.15-6.module+el8.0.0+5219+3c0c6858 |
| [hivex-devel](https://patchblox.com/security/data/product/linux/hivex-devel.md) | ol 8 | 0:1.3.15-6.module+el8.0.0+5219+3c0c6858 |
| [libguestfs](https://patchblox.com/security/data/product/linux/libguestfs.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-bash-completion](https://patchblox.com/security/data/product/linux/libguestfs-bash-completion.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-benchmarking](https://patchblox.com/security/data/product/linux/libguestfs-benchmarking.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-devel](https://patchblox.com/security/data/product/linux/libguestfs-devel.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-gfs2](https://patchblox.com/security/data/product/linux/libguestfs-gfs2.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-gobject](https://patchblox.com/security/data/product/linux/libguestfs-gobject.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-gobject-devel](https://patchblox.com/security/data/product/linux/libguestfs-gobject-devel.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-inspect-icons](https://patchblox.com/security/data/product/linux/libguestfs-inspect-icons.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-java](https://patchblox.com/security/data/product/linux/libguestfs-java.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-java-devel](https://patchblox.com/security/data/product/linux/libguestfs-java-devel.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-javadoc](https://patchblox.com/security/data/product/linux/libguestfs-javadoc.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-man-pages-ja](https://patchblox.com/security/data/product/linux/libguestfs-man-pages-ja.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-man-pages-uk](https://patchblox.com/security/data/product/linux/libguestfs-man-pages-uk.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-rescue](https://patchblox.com/security/data/product/linux/libguestfs-rescue.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-rsync](https://patchblox.com/security/data/product/linux/libguestfs-rsync.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-tools](https://patchblox.com/security/data/product/linux/libguestfs-tools.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-tools-c](https://patchblox.com/security/data/product/linux/libguestfs-tools-c.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-winsupport](https://patchblox.com/security/data/product/linux/libguestfs-winsupport.md) | ol 8 | 0:8.0-2.module+el8.0.0+5219+3c0c6858 |
| [libguestfs-xfs](https://patchblox.com/security/data/product/linux/libguestfs-xfs.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [libiscsi](https://patchblox.com/security/data/product/linux/libiscsi.md) | ol 8 | 0:1.18.0-6.module+el8.0.0+5219+3c0c6858 |
| [libiscsi-devel](https://patchblox.com/security/data/product/linux/libiscsi-devel.md) | ol 8 | 0:1.18.0-6.module+el8.0.0+5219+3c0c6858 |
| [libiscsi-utils](https://patchblox.com/security/data/product/linux/libiscsi-utils.md) | ol 8 | 0:1.18.0-6.module+el8.0.0+5219+3c0c6858 |
| [libssh2](https://patchblox.com/security/data/product/linux/libssh2.md) | ol 8 | 0:1.8.0-7.module+el8.0.0+5219+3c0c6858.1 |
| [libvirt](https://patchblox.com/security/data/product/linux/libvirt.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-admin](https://patchblox.com/security/data/product/linux/libvirt-admin.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-bash-completion](https://patchblox.com/security/data/product/linux/libvirt-bash-completion.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-client](https://patchblox.com/security/data/product/linux/libvirt-client.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon](https://patchblox.com/security/data/product/linux/libvirt-daemon.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-config-network](https://patchblox.com/security/data/product/linux/libvirt-daemon-config-network.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-config-nwfilter](https://patchblox.com/security/data/product/linux/libvirt-daemon-config-nwfilter.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-interface](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-interface.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-network](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-network.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-nodedev](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-nodedev.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-nwfilter](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-nwfilter.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-qemu](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-qemu.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-secret](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-secret.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-storage](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-storage-core](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-core.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-storage-disk](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-disk.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-storage-gluster](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-gluster.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-storage-iscsi](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-iscsi.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-storage-logical](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-logical.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-storage-mpath](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-mpath.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-storage-rbd](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-rbd.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-driver-storage-scsi](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-scsi.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-daemon-kvm](https://patchblox.com/security/data/product/linux/libvirt-daemon-kvm.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-dbus](https://patchblox.com/security/data/product/linux/libvirt-dbus.md) | ol 8 | 0:1.2.0-2.module+el8.0.0+5219+3c0c6858 |
| [libvirt-devel](https://patchblox.com/security/data/product/linux/libvirt-devel.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-docs](https://patchblox.com/security/data/product/linux/libvirt-docs.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-libs](https://patchblox.com/security/data/product/linux/libvirt-libs.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-lock-sanlock](https://patchblox.com/security/data/product/linux/libvirt-lock-sanlock.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [libvirt-nss](https://patchblox.com/security/data/product/linux/libvirt-nss.md) | ol 8 | 0:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858 |
| [lua-guestfs](https://patchblox.com/security/data/product/linux/lua-guestfs.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [nbdkit](https://patchblox.com/security/data/product/linux/nbdkit.md) | ol 8 | 0:1.4.2-4.module+el8.0.0+5219+3c0c6858 |
| [nbdkit-bash-completion](https://patchblox.com/security/data/product/linux/nbdkit-bash-completion.md) | ol 8 | 0:1.4.2-4.module+el8.0.0+5219+3c0c6858 |
| [nbdkit-basic-plugins](https://patchblox.com/security/data/product/linux/nbdkit-basic-plugins.md) | ol 8 | 0:1.4.2-4.module+el8.0.0+5219+3c0c6858 |
| [nbdkit-devel](https://patchblox.com/security/data/product/linux/nbdkit-devel.md) | ol 8 | 0:1.4.2-4.module+el8.0.0+5219+3c0c6858 |
| [nbdkit-example-plugins](https://patchblox.com/security/data/product/linux/nbdkit-example-plugins.md) | ol 8 | 0:1.4.2-4.module+el8.0.0+5219+3c0c6858 |
| [nbdkit-plugin-gzip](https://patchblox.com/security/data/product/linux/nbdkit-plugin-gzip.md) | ol 8 | 0:1.4.2-4.module+el8.0.0+5219+3c0c6858 |
| [nbdkit-plugin-python-common](https://patchblox.com/security/data/product/linux/nbdkit-plugin-python-common.md) | ol 8 | 0:1.4.2-4.module+el8.0.0+5219+3c0c6858 |
| [nbdkit-plugin-python3](https://patchblox.com/security/data/product/linux/nbdkit-plugin-python3.md) | ol 8 | 0:1.4.2-4.module+el8.0.0+5219+3c0c6858 |
| [nbdkit-plugin-vddk](https://patchblox.com/security/data/product/linux/nbdkit-plugin-vddk.md) | ol 8 | 0:1.4.2-4.module+el8.0.0+5219+3c0c6858 |
| [nbdkit-plugin-xz](https://patchblox.com/security/data/product/linux/nbdkit-plugin-xz.md) | ol 8 | 0:1.4.2-4.module+el8.0.0+5219+3c0c6858 |
| [netcf](https://patchblox.com/security/data/product/linux/netcf.md) | ol 8 | 0:0.2.8-10.module+el8.0.0+5219+3c0c6858 |
| [netcf-devel](https://patchblox.com/security/data/product/linux/netcf-devel.md) | ol 8 | 0:0.2.8-10.module+el8.0.0+5219+3c0c6858 |
| [netcf-libs](https://patchblox.com/security/data/product/linux/netcf-libs.md) | ol 8 | 0:0.2.8-10.module+el8.0.0+5219+3c0c6858 |
| [perl-Sys-Guestfs](https://patchblox.com/security/data/product/linux/perl-sys-guestfs.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [perl-Sys-Virt](https://patchblox.com/security/data/product/linux/perl-sys-virt.md) | ol 8 | 0:4.5.0-4.module+el8.0.0+5219+3c0c6858 |
| [perl-hivex](https://patchblox.com/security/data/product/linux/perl-hivex.md) | ol 8 | 0:1.3.15-6.module+el8.0.0+5219+3c0c6858 |
| [python3-hivex](https://patchblox.com/security/data/product/linux/python3-hivex.md) | ol 8 | 0:1.3.15-6.module+el8.0.0+5219+3c0c6858 |
| [python3-libguestfs](https://patchblox.com/security/data/product/linux/python3-libguestfs.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [python3-libvirt](https://patchblox.com/security/data/product/linux/python3-libvirt.md) | ol 8 | 0:4.5.0-1.module+el8.0.0+5219+3c0c6858 |
| [qemu-guest-agent](https://patchblox.com/security/data/product/linux/qemu-guest-agent.md) | ol 8 | 15:2.12.0-64.module+el8.0.0+5219+3c0c6858.2 |
| [qemu-img](https://patchblox.com/security/data/product/linux/qemu-img.md) | ol 8 | 15:2.12.0-64.module+el8.0.0+5219+3c0c6858.2 |
| [qemu-kvm](https://patchblox.com/security/data/product/linux/qemu-kvm.md) | ol 8 | 15:2.12.0-64.module+el8.0.0+5219+3c0c6858.2 |
| [qemu-kvm-block-curl](https://patchblox.com/security/data/product/linux/qemu-kvm-block-curl.md) | ol 8 | 15:2.12.0-64.module+el8.0.0+5219+3c0c6858.2 |
| [qemu-kvm-block-gluster](https://patchblox.com/security/data/product/linux/qemu-kvm-block-gluster.md) | ol 8 | 15:2.12.0-64.module+el8.0.0+5219+3c0c6858.2 |
| [qemu-kvm-block-iscsi](https://patchblox.com/security/data/product/linux/qemu-kvm-block-iscsi.md) | ol 8 | 15:2.12.0-64.module+el8.0.0+5219+3c0c6858.2 |
| [qemu-kvm-block-rbd](https://patchblox.com/security/data/product/linux/qemu-kvm-block-rbd.md) | ol 8 | 15:2.12.0-64.module+el8.0.0+5219+3c0c6858.2 |
| [qemu-kvm-block-ssh](https://patchblox.com/security/data/product/linux/qemu-kvm-block-ssh.md) | ol 8 | 15:2.12.0-64.module+el8.0.0+5219+3c0c6858.2 |
| [qemu-kvm-common](https://patchblox.com/security/data/product/linux/qemu-kvm-common.md) | ol 8 | 15:2.12.0-64.module+el8.0.0+5219+3c0c6858.2 |
| [qemu-kvm-core](https://patchblox.com/security/data/product/linux/qemu-kvm-core.md) | ol 8 | 15:2.12.0-64.module+el8.0.0+5219+3c0c6858.2 |
| [ruby-hivex](https://patchblox.com/security/data/product/linux/ruby-hivex.md) | ol 8 | 0:1.3.15-6.module+el8.0.0+5219+3c0c6858 |
| [ruby-libguestfs](https://patchblox.com/security/data/product/linux/ruby-libguestfs.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [seabios](https://patchblox.com/security/data/product/linux/seabios.md) | ol 8 | 0:1.11.1-3.module+el8.0.0+5219+3c0c6858 |
| [seabios-bin](https://patchblox.com/security/data/product/linux/seabios-bin.md) | ol 8 | 0:1.11.1-3.module+el8.0.0+5219+3c0c6858 |
| [seavgabios-bin](https://patchblox.com/security/data/product/linux/seavgabios-bin.md) | ol 8 | 0:1.11.1-3.module+el8.0.0+5219+3c0c6858 |
| [sgabios](https://patchblox.com/security/data/product/linux/sgabios.md) | ol 8 | 1:0.20170427git-2.module+el8.0.0+5219+3c0c6858 |
| [sgabios-bin](https://patchblox.com/security/data/product/linux/sgabios-bin.md) | ol 8 | 1:0.20170427git-2.module+el8.0.0+5219+3c0c6858 |
| [supermin](https://patchblox.com/security/data/product/linux/supermin.md) | ol 8 | 0:5.1.19-8.module+el8.0.0+5219+3c0c6858 |
| [supermin-devel](https://patchblox.com/security/data/product/linux/supermin-devel.md) | ol 8 | 0:5.1.19-8.module+el8.0.0+5219+3c0c6858 |
| [virt-dib](https://patchblox.com/security/data/product/linux/virt-dib.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [virt-p2v-maker](https://patchblox.com/security/data/product/linux/virt-p2v-maker.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |
| [virt-v2v](https://patchblox.com/security/data/product/linux/virt-v2v.md) | ol 8 | 1:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2019-3855](https://patchblox.com/security/data/cve/CVE-2019-3855.md) | High | libvirt-daemon-driver-storage-disk: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 8.8 | 0.0929 |  |
| [CVE-2019-3856](https://patchblox.com/security/data/cve/CVE-2019-3856.md) | High | libguestfs-man-pages-uk: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 8.8 | 0.0613 |  |
| [CVE-2019-3857](https://patchblox.com/security/data/cve/CVE-2019-3857.md) | High | hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 8.8 | 0.0613 |  |
| [CVE-2018-20815](https://patchblox.com/security/data/cve/CVE-2018-20815.md) | High | qemu-system-x86: In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflo... | 9.8 | 0.0443 |  |
| [CVE-2019-3863](https://patchblox.com/security/data/cve/CVE-2019-3863.md) | High | hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 8.8 | 0.0344 |  |
| [CVE-2018-12130](https://patchblox.com/security/data/cve/CVE-2018-12130.md) | Routine | libiscsi: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.2 | 0.0155 |  |
| [CVE-2018-12126](https://patchblox.com/security/data/cve/CVE-2018-12126.md) | Routine | qemu-kvm: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.5 | 0.0151 |  |
| [CVE-2018-12127](https://patchblox.com/security/data/cve/CVE-2018-12127.md) | Routine | libvirt: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.5 | 0.0150 |  |
| [CVE-2019-11091](https://patchblox.com/security/data/cve/CVE-2019-11091.md) | Routine | libnss-libvirt: Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheablememory on some microprocessors utilizing spec... | 5.6 | 0.0061 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo