{
  "fix": "RHSA-2019:3494",
  "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3494",
  "summary": "RHSA-2019:3494, released November 5, 2019, fixes 2 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 12 packages",
  "released": "2019-11-05T00:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2019-14378, high severity",
  "supported": true,
  "cveCount": 2,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.16658,
  "maxCvss": 8.8,
  "vendorAdvisory": "https://access.redhat.com/errata/RHSA-2019:3494",
  "appliesTo": [
    {
      "product": "buildah",
      "productUrl": "https://patchblox.com/security/product/linux/buildah",
      "release": "RHEL 8",
      "fixedVersion": "0:1.5-5.gite94b4f9.module\u002Bel8.1.0\u002B4241\u002Ba7060183",
      "supported": true
    },
    {
      "product": "container-selinux",
      "productUrl": "https://patchblox.com/security/product/linux/container-selinux",
      "release": "RHEL 8",
      "fixedVersion": "2:2.94-1.git1e99f1d.module\u002Bel8.1.0\u002B3468\u002B011f0ab0",
      "supported": true
    },
    {
      "product": "containernetworking-plugins",
      "productUrl": "https://patchblox.com/security/product/linux/containernetworking-plugins",
      "release": "RHEL 8",
      "fixedVersion": "0:0.7.4-3.git9ebe139.module\u002Bel8.1.0\u002B3468\u002B011f0ab0",
      "supported": true
    },
    {
      "product": "containers-common",
      "productUrl": "https://patchblox.com/security/product/linux/containers-common",
      "release": "RHEL 8",
      "fixedVersion": "1:0.1.32-5.git1715c90.module\u002Bel8.1.0\u002B4241\u002Ba7060183",
      "supported": true
    },
    {
      "product": "fuse-overlayfs",
      "productUrl": "https://patchblox.com/security/product/linux/fuse-overlayfs",
      "release": "RHEL 8",
      "fixedVersion": "0:0.3-5.module\u002Bel8.1.0\u002B3468\u002B011f0ab0",
      "supported": true
    },
    {
      "product": "oci-systemd-hook",
      "productUrl": "https://patchblox.com/security/product/linux/oci-systemd-hook",
      "release": "RHEL 8",
      "fixedVersion": "1:0.1.15-2.git2d0b8a3.module\u002Bel8.1.0\u002B3468\u002B011f0ab0",
      "supported": true
    },
    {
      "product": "oci-umount",
      "productUrl": "https://patchblox.com/security/product/linux/oci-umount",
      "release": "RHEL 8",
      "fixedVersion": "2:2.3.4-2.git87f9237.module\u002Bel8.1.0\u002B3468\u002B011f0ab0",
      "supported": true
    },
    {
      "product": "podman",
      "productUrl": "https://patchblox.com/security/product/linux/podman",
      "release": "RHEL 8",
      "fixedVersion": "0:1.0.0-3.git921f98f.module\u002Bel8.1.0\u002B4241\u002Ba7060183",
      "supported": true
    },
    {
      "product": "podman-docker",
      "productUrl": "https://patchblox.com/security/product/linux/podman-docker",
      "release": "RHEL 8",
      "fixedVersion": "0:1.0.0-3.git921f98f.module\u002Bel8.1.0\u002B4241\u002Ba7060183",
      "supported": true
    },
    {
      "product": "runc",
      "productUrl": "https://patchblox.com/security/product/linux/runc",
      "release": "RHEL 8",
      "fixedVersion": "0:1.0.0-55.rc5.dev.git2abd837.module\u002Bel8.1.0\u002B3468\u002B011f0ab0",
      "supported": true
    },
    {
      "product": "skopeo",
      "productUrl": "https://patchblox.com/security/product/linux/skopeo",
      "release": "RHEL 8",
      "fixedVersion": "1:0.1.32-5.git1715c90.module\u002Bel8.1.0\u002B4241\u002Ba7060183",
      "supported": true
    },
    {
      "product": "slirp4netns",
      "productUrl": "https://patchblox.com/security/product/linux/slirp4netns",
      "release": "RHEL 8",
      "fixedVersion": "0:0.1-3.dev.gitc4e1bc5.module\u002Bel8.1.0\u002B4308\u002B9d868e48",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2019-14378",
      "url": "https://patchblox.com/security/cve/CVE-2019-14378",
      "title": "qemu-block-supplemental: ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflowvia a large packet because it mishandles a c...",
      "priority": "High",
      "severity": "Low",
      "cvss": 8.8,
      "epss": 0.16658,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-10214",
      "url": "https://patchblox.com/security/cve/CVE-2019-10214",
      "title": "buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.\n\nSe...",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.4,
      "epss": 0.01591,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}