# ELSA-2019-3345: Security update for 100 packages

ELSA-2019-3345, released November 14, 2019, fixes 3 CVEs across 100 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/elsa-2019-3345
- Platform: Linux
- Released: Nov 14, 2019
- Priority: High (Closes CVE-2019-12155, high severity)
- CVEs: 3, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2019-3345.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [hivex](https://patchblox.com/security/data/product/linux/hivex.md) | ol 8 | 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7 |
| [hivex-devel](https://patchblox.com/security/data/product/linux/hivex-devel.md) | ol 8 | 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs](https://patchblox.com/security/data/product/linux/libguestfs.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-bash-completion](https://patchblox.com/security/data/product/linux/libguestfs-bash-completion.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-benchmarking](https://patchblox.com/security/data/product/linux/libguestfs-benchmarking.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-devel](https://patchblox.com/security/data/product/linux/libguestfs-devel.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-gfs2](https://patchblox.com/security/data/product/linux/libguestfs-gfs2.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-gobject](https://patchblox.com/security/data/product/linux/libguestfs-gobject.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-gobject-devel](https://patchblox.com/security/data/product/linux/libguestfs-gobject-devel.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-inspect-icons](https://patchblox.com/security/data/product/linux/libguestfs-inspect-icons.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-java](https://patchblox.com/security/data/product/linux/libguestfs-java.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-java-devel](https://patchblox.com/security/data/product/linux/libguestfs-java-devel.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-javadoc](https://patchblox.com/security/data/product/linux/libguestfs-javadoc.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-man-pages-ja](https://patchblox.com/security/data/product/linux/libguestfs-man-pages-ja.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-man-pages-uk](https://patchblox.com/security/data/product/linux/libguestfs-man-pages-uk.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-rescue](https://patchblox.com/security/data/product/linux/libguestfs-rescue.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-rsync](https://patchblox.com/security/data/product/linux/libguestfs-rsync.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-tools](https://patchblox.com/security/data/product/linux/libguestfs-tools.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-tools-c](https://patchblox.com/security/data/product/linux/libguestfs-tools-c.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-winsupport](https://patchblox.com/security/data/product/linux/libguestfs-winsupport.md) | ol 8 | 0:8.0-4.module+el8.1.0+5378+c5e0f4d7 |
| [libguestfs-xfs](https://patchblox.com/security/data/product/linux/libguestfs-xfs.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libiscsi](https://patchblox.com/security/data/product/linux/libiscsi.md) | ol 8 | 0:1.18.0-8.module+el8.1.0+5378+c5e0f4d7 |
| [libiscsi-devel](https://patchblox.com/security/data/product/linux/libiscsi-devel.md) | ol 8 | 0:1.18.0-8.module+el8.1.0+5378+c5e0f4d7 |
| [libiscsi-utils](https://patchblox.com/security/data/product/linux/libiscsi-utils.md) | ol 8 | 0:1.18.0-8.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt](https://patchblox.com/security/data/product/linux/libvirt.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-admin](https://patchblox.com/security/data/product/linux/libvirt-admin.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-bash-completion](https://patchblox.com/security/data/product/linux/libvirt-bash-completion.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-client](https://patchblox.com/security/data/product/linux/libvirt-client.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon](https://patchblox.com/security/data/product/linux/libvirt-daemon.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-config-network](https://patchblox.com/security/data/product/linux/libvirt-daemon-config-network.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-config-nwfilter](https://patchblox.com/security/data/product/linux/libvirt-daemon-config-nwfilter.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-interface](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-interface.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-network](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-network.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-nodedev](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-nodedev.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-nwfilter](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-nwfilter.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-qemu](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-qemu.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-secret](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-secret.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-storage](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-storage-core](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-core.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-storage-disk](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-disk.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-storage-gluster](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-gluster.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-storage-iscsi](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-iscsi.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-storage-logical](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-logical.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-storage-mpath](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-mpath.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-storage-rbd](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-rbd.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-driver-storage-scsi](https://patchblox.com/security/data/product/linux/libvirt-daemon-driver-storage-scsi.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-daemon-kvm](https://patchblox.com/security/data/product/linux/libvirt-daemon-kvm.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-dbus](https://patchblox.com/security/data/product/linux/libvirt-dbus.md) | ol 8 | 0:1.2.0-3.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-devel](https://patchblox.com/security/data/product/linux/libvirt-devel.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-docs](https://patchblox.com/security/data/product/linux/libvirt-docs.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-libs](https://patchblox.com/security/data/product/linux/libvirt-libs.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-lock-sanlock](https://patchblox.com/security/data/product/linux/libvirt-lock-sanlock.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [libvirt-nss](https://patchblox.com/security/data/product/linux/libvirt-nss.md) | ol 8 | 0:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [lua-guestfs](https://patchblox.com/security/data/product/linux/lua-guestfs.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [nbdkit](https://patchblox.com/security/data/product/linux/nbdkit.md) | ol 8 | 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7 |
| [nbdkit-bash-completion](https://patchblox.com/security/data/product/linux/nbdkit-bash-completion.md) | ol 8 | 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7 |
| [nbdkit-basic-plugins](https://patchblox.com/security/data/product/linux/nbdkit-basic-plugins.md) | ol 8 | 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7 |
| [nbdkit-devel](https://patchblox.com/security/data/product/linux/nbdkit-devel.md) | ol 8 | 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7 |
| [nbdkit-example-plugins](https://patchblox.com/security/data/product/linux/nbdkit-example-plugins.md) | ol 8 | 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7 |
| [nbdkit-plugin-gzip](https://patchblox.com/security/data/product/linux/nbdkit-plugin-gzip.md) | ol 8 | 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7 |
| [nbdkit-plugin-python-common](https://patchblox.com/security/data/product/linux/nbdkit-plugin-python-common.md) | ol 8 | 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7 |
| [nbdkit-plugin-python3](https://patchblox.com/security/data/product/linux/nbdkit-plugin-python3.md) | ol 8 | 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7 |
| [nbdkit-plugin-vddk](https://patchblox.com/security/data/product/linux/nbdkit-plugin-vddk.md) | ol 8 | 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7 |
| [nbdkit-plugin-xz](https://patchblox.com/security/data/product/linux/nbdkit-plugin-xz.md) | ol 8 | 0:1.4.2-5.module+el8.1.0+5378+c5e0f4d7 |
| [netcf](https://patchblox.com/security/data/product/linux/netcf.md) | ol 8 | 0:0.2.8-12.module+el8.1.0+5378+c5e0f4d7 |
| [netcf-devel](https://patchblox.com/security/data/product/linux/netcf-devel.md) | ol 8 | 0:0.2.8-12.module+el8.1.0+5378+c5e0f4d7 |
| [netcf-libs](https://patchblox.com/security/data/product/linux/netcf-libs.md) | ol 8 | 0:0.2.8-12.module+el8.1.0+5378+c5e0f4d7 |
| [ocaml-hivex](https://patchblox.com/security/data/product/linux/ocaml-hivex.md) | ol 8 | 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7 |
| [ocaml-hivex-devel](https://patchblox.com/security/data/product/linux/ocaml-hivex-devel.md) | ol 8 | 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7 |
| [ocaml-libguestfs](https://patchblox.com/security/data/product/linux/ocaml-libguestfs.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [ocaml-libguestfs-devel](https://patchblox.com/security/data/product/linux/ocaml-libguestfs-devel.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [perl-Sys-Guestfs](https://patchblox.com/security/data/product/linux/perl-sys-guestfs.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [perl-Sys-Virt](https://patchblox.com/security/data/product/linux/perl-sys-virt.md) | ol 8 | 0:4.5.0-5.module+el8.1.0+5378+c5e0f4d7 |
| [perl-hivex](https://patchblox.com/security/data/product/linux/perl-hivex.md) | ol 8 | 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7 |
| [python3-hivex](https://patchblox.com/security/data/product/linux/python3-hivex.md) | ol 8 | 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7 |
| [python3-libguestfs](https://patchblox.com/security/data/product/linux/python3-libguestfs.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [python3-libvirt](https://patchblox.com/security/data/product/linux/python3-libvirt.md) | ol 8 | 0:4.5.0-2.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-guest-agent](https://patchblox.com/security/data/product/linux/qemu-guest-agent.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-img](https://patchblox.com/security/data/product/linux/qemu-img.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-kvm](https://patchblox.com/security/data/product/linux/qemu-kvm.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-kvm-block-curl](https://patchblox.com/security/data/product/linux/qemu-kvm-block-curl.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-kvm-block-gluster](https://patchblox.com/security/data/product/linux/qemu-kvm-block-gluster.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-kvm-block-iscsi](https://patchblox.com/security/data/product/linux/qemu-kvm-block-iscsi.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-kvm-block-rbd](https://patchblox.com/security/data/product/linux/qemu-kvm-block-rbd.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-kvm-block-ssh](https://patchblox.com/security/data/product/linux/qemu-kvm-block-ssh.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-kvm-common](https://patchblox.com/security/data/product/linux/qemu-kvm-common.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-kvm-core](https://patchblox.com/security/data/product/linux/qemu-kvm-core.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [qemu-kvm-tests](https://patchblox.com/security/data/product/linux/qemu-kvm-tests.md) | ol 8 | 15:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [ruby-hivex](https://patchblox.com/security/data/product/linux/ruby-hivex.md) | ol 8 | 0:1.3.15-7.module+el8.1.0+5378+c5e0f4d7 |
| [ruby-libguestfs](https://patchblox.com/security/data/product/linux/ruby-libguestfs.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [seabios](https://patchblox.com/security/data/product/linux/seabios.md) | ol 8 | 0:1.11.1-4.module+el8.1.0+5378+c5e0f4d7 |
| [seabios-bin](https://patchblox.com/security/data/product/linux/seabios-bin.md) | ol 8 | 0:1.11.1-4.module+el8.1.0+5378+c5e0f4d7 |
| [seavgabios-bin](https://patchblox.com/security/data/product/linux/seavgabios-bin.md) | ol 8 | 0:1.11.1-4.module+el8.1.0+5378+c5e0f4d7 |
| [sgabios](https://patchblox.com/security/data/product/linux/sgabios.md) | ol 8 | 1:0.20170427git-3.module+el8.1.0+5378+c5e0f4d7 |
| [sgabios-bin](https://patchblox.com/security/data/product/linux/sgabios-bin.md) | ol 8 | 1:0.20170427git-3.module+el8.1.0+5378+c5e0f4d7 |
| [supermin](https://patchblox.com/security/data/product/linux/supermin.md) | ol 8 | 0:5.1.19-9.module+el8.1.0+5378+c5e0f4d7 |
| [supermin-devel](https://patchblox.com/security/data/product/linux/supermin-devel.md) | ol 8 | 0:5.1.19-9.module+el8.1.0+5378+c5e0f4d7 |
| [virt-dib](https://patchblox.com/security/data/product/linux/virt-dib.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [virt-p2v-maker](https://patchblox.com/security/data/product/linux/virt-p2v-maker.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |
| [virt-v2v](https://patchblox.com/security/data/product/linux/virt-v2v.md) | ol 8 | 1:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2019-12155](https://patchblox.com/security/data/cve/CVE-2019-12155.md) | High | qemu-system-x86-xen: interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference. | 7.5 | 0.0555 |  |
| [CVE-2019-9755](https://patchblox.com/security/data/cve/CVE-2019-9755.md) | High | hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 7.0 | 0.0053 |  |
| [CVE-2019-9824](https://patchblox.com/security/data/cve/CVE-2019-9824.md) | Routine | hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 5.5 | 0.0052 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo