Linux · Security advisory · July 30, 2019

ELSA-2019-1175: Security update for 96 packages

ELSA-2019-1175, released July 30, 2019, fixes 9 CVEs across 96 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0929
95th percentile

Priority of the 9 CVEs

Patch now 0 Urgent 0 High 5 Routine 4

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.15-6.module+el8.0.0+5219+3c0c6858
hivex-develol 80:1.3.15-6.module+el8.0.0+5219+3c0c6858
libguestfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-bash-completionol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-benchmarkingol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-develol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-gfs2ol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-gobjectol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-gobject-develol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-inspect-iconsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-javaol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-java-develol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-javadocol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-man-pages-jaol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-man-pages-ukol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-rescueol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-rsyncol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-toolsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-tools-col 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-winsupportol 80:8.0-2.module+el8.0.0+5219+3c0c6858
libguestfs-xfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libiscsiol 80:1.18.0-6.module+el8.0.0+5219+3c0c6858
libiscsi-develol 80:1.18.0-6.module+el8.0.0+5219+3c0c6858
libiscsi-utilsol 80:1.18.0-6.module+el8.0.0+5219+3c0c6858
libssh2ol 80:1.8.0-7.module+el8.0.0+5219+3c0c6858.1
libvirtol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-adminol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-bash-completionol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-clientol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemonol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-config-networkol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-config-nwfilterol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-interfaceol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-networkol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-nodedevol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-nwfilterol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-qemuol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-secretol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storageol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-coreol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-diskol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-glusterol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-iscsiol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-logicalol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-mpathol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-rbdol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-scsiol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-kvmol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-dbusol 80:1.2.0-2.module+el8.0.0+5219+3c0c6858
libvirt-develol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-docsol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-libsol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-lock-sanlockol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-nssol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
lua-guestfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
nbdkitol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-bash-completionol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-basic-pluginsol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-develol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-example-pluginsol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-plugin-gzipol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-plugin-python-commonol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-plugin-python3ol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-plugin-vddkol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-plugin-xzol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
netcfol 80:0.2.8-10.module+el8.0.0+5219+3c0c6858
netcf-develol 80:0.2.8-10.module+el8.0.0+5219+3c0c6858
netcf-libsol 80:0.2.8-10.module+el8.0.0+5219+3c0c6858
perl-Sys-Guestfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
perl-Sys-Virtol 80:4.5.0-4.module+el8.0.0+5219+3c0c6858
perl-hivexol 80:1.3.15-6.module+el8.0.0+5219+3c0c6858
python3-hivexol 80:1.3.15-6.module+el8.0.0+5219+3c0c6858
python3-libguestfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
python3-libvirtol 80:4.5.0-1.module+el8.0.0+5219+3c0c6858
qemu-guest-agentol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-imgol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvmol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-block-curlol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-block-glusterol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-block-iscsiol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-block-rbdol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-block-sshol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-commonol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-coreol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
ruby-hivexol 80:1.3.15-6.module+el8.0.0+5219+3c0c6858
ruby-libguestfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
seabiosol 80:1.11.1-3.module+el8.0.0+5219+3c0c6858
seabios-binol 80:1.11.1-3.module+el8.0.0+5219+3c0c6858
seavgabios-binol 80:1.11.1-3.module+el8.0.0+5219+3c0c6858
sgabiosol 81:0.20170427git-2.module+el8.0.0+5219+3c0c6858
sgabios-binol 81:0.20170427git-2.module+el8.0.0+5219+3c0c6858
superminol 80:5.1.19-8.module+el8.0.0+5219+3c0c6858
supermin-develol 80:5.1.19-8.module+el8.0.0+5219+3c0c6858
virt-dibol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
virt-p2v-makerol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
virt-v2vol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-3855 libvirt-daemon-driver-storage-disk: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 8.8 0.0929 None reported
High CVE-2019-3856 libguestfs-man-pages-uk: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 8.8 0.0613 None reported
High CVE-2019-3857 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 8.8 0.0613 None reported
High CVE-2018-20815 qemu-system-x86: In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflo... 9.8 0.0443 None reported
High CVE-2019-3863 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 8.8 0.0344 None reported
Routine CVE-2018-12130 libiscsi: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.2 0.0155 None reported
Routine CVE-2018-12126 qemu-kvm: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.5 0.0151 None reported
Routine CVE-2018-12127 libvirt: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 6.5 0.0150 None reported
Routine CVE-2019-11091 libnss-libvirt: Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheablememory on some microprocessors utilizing spec... 5.6 0.0061 None reported
Showing 1 to 9 of 9 1