# RHSA-2019:3583: Security update for 24 packages

RHSA-2019:3583, released November 5, 2019, fixes 2 CVEs across 24 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/rhsa-2019-3583
- Platform: Linux
- Released: Nov 5, 2019
- Priority: High (Closes CVE-2019-3817, high severity)
- CVEs: 2, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://access.redhat.com/errata/RHSA-2019:3583

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [createrepo_c](https://patchblox.com/security/data/product/linux/createrepo-c.md) | RHEL 8 | 0:0.11.0-3.el8 |
| [createrepo_c-devel](https://patchblox.com/security/data/product/linux/createrepo-c-devel.md) | RHEL 8 | 0:0.11.0-3.el8 |
| [createrepo_c-libs](https://patchblox.com/security/data/product/linux/createrepo-c-libs.md) | RHEL 8 | 0:0.11.0-3.el8 |
| [dnf](https://patchblox.com/security/data/product/linux/dnf.md) | RHEL 8 | 0:4.2.7-6.el8 |
| [dnf-automatic](https://patchblox.com/security/data/product/linux/dnf-automatic.md) | RHEL 8 | 0:4.2.7-6.el8 |
| [dnf-data](https://patchblox.com/security/data/product/linux/dnf-data.md) | RHEL 8 | 0:4.2.7-6.el8 |
| [dnf-plugins-core](https://patchblox.com/security/data/product/linux/dnf-plugins-core.md) | RHEL 8 | 0:4.0.8-3.el8 |
| [libcomps](https://patchblox.com/security/data/product/linux/libcomps.md) | RHEL 8 | 0:0.1.11-2.el8 |
| [libcomps-devel](https://patchblox.com/security/data/product/linux/libcomps-devel.md) | RHEL 8 | 0:0.1.11-2.el8 |
| [libdnf](https://patchblox.com/security/data/product/linux/libdnf.md) | RHEL 8 | 0:0.35.1-8.el8 |
| [librepo](https://patchblox.com/security/data/product/linux/librepo.md) | RHEL 8 | 0:1.10.3-3.el8 |
| [librhsm](https://patchblox.com/security/data/product/linux/librhsm.md) | RHEL 8 | 0:0.0.3-3.el8 |
| [libsolv](https://patchblox.com/security/data/product/linux/libsolv.md) | RHEL 8 | 0:0.7.4-3.el8 |
| [microdnf](https://patchblox.com/security/data/product/linux/microdnf.md) | RHEL 8 | 0:3.0.1-3.el8 |
| [python3-createrepo_c](https://patchblox.com/security/data/product/linux/python3-createrepo-c.md) | RHEL 8 | 0:0.11.0-3.el8 |
| [python3-dnf](https://patchblox.com/security/data/product/linux/python3-dnf.md) | RHEL 8 | 0:4.2.7-6.el8 |
| [python3-dnf-plugin-versionlock](https://patchblox.com/security/data/product/linux/python3-dnf-plugin-versionlock.md) | RHEL 8 | 0:4.0.8-3.el8 |
| [python3-dnf-plugins-core](https://patchblox.com/security/data/product/linux/python3-dnf-plugins-core.md) | RHEL 8 | 0:4.0.8-3.el8 |
| [python3-hawkey](https://patchblox.com/security/data/product/linux/python3-hawkey.md) | RHEL 8 | 0:0.35.1-8.el8 |
| [python3-libcomps](https://patchblox.com/security/data/product/linux/python3-libcomps.md) | RHEL 8 | 0:0.1.11-2.el8 |
| [python3-libdnf](https://patchblox.com/security/data/product/linux/python3-libdnf.md) | RHEL 8 | 0:0.35.1-8.el8 |
| [python3-librepo](https://patchblox.com/security/data/product/linux/python3-librepo.md) | RHEL 8 | 0:1.10.3-3.el8 |
| [yum](https://patchblox.com/security/data/product/linux/yum.md) | RHEL 8 | 0:4.2.7-6.el8 |
| [yum-utils](https://patchblox.com/security/data/product/linux/yum-utils.md) | RHEL 8 | 0:4.0.8-3.el8 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2019-3817](https://patchblox.com/security/data/cve/CVE-2019-3817.md) | High | createrepo_c: Yum is a command-line utility that allows the user to check for updates and automatically download and install update... | 8.8 | 0.0172 |  |
| [CVE-2018-20534](https://patchblox.com/security/data/cve/CVE-2018-20534.md) | Routine | createrepo_c: Yum is a command-line utility that allows the user to check for updates and automatically download and install update... | 6.5 | 0.0224 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo