Linux · Security advisory · July 30, 2019
ELSA-2019-1580: Security update for 96 packages
ELSA-2019-1580, released July 30, 2019, fixes 4 CVEs across 96 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0055
46th percentile
Priority of the 4 CVEs
Patch now 0
Urgent 0
High 4
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| hivex | ol 8 | 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3 |
| hivex-devel | ol 8 | 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-bash-completion | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-benchmarking | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-devel | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-gfs2 | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-gobject | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-gobject-devel | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-inspect-icons | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-java | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-java-devel | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-javadoc | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-man-pages-ja | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-man-pages-uk | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-rescue | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-rsync | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-tools | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-tools-c | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-winsupport | ol 8 | 0:8.0-2.module+el8.0.0.z+5234+5e9073e3 |
| libguestfs-xfs | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libiscsi | ol 8 | 0:1.18.0-6.module+el8.0.0.z+5234+5e9073e3 |
| libiscsi-devel | ol 8 | 0:1.18.0-6.module+el8.0.0.z+5234+5e9073e3 |
| libiscsi-utils | ol 8 | 0:1.18.0-6.module+el8.0.0.z+5234+5e9073e3 |
| libssh2 | ol 8 | 0:1.8.0-7.module+el8.0.0.z+5234+5e9073e3.1 |
| libvirt | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-admin | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-bash-completion | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-client | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-config-network | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-config-nwfilter | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-interface | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-network | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-nodedev | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-nwfilter | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-qemu | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-secret | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-storage | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-storage-core | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-storage-disk | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-storage-gluster | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-storage-iscsi | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-storage-logical | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-storage-mpath | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-storage-rbd | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-driver-storage-scsi | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-daemon-kvm | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-dbus | ol 8 | 0:1.2.0-2.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-devel | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-docs | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-libs | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-lock-sanlock | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| libvirt-nss | ol 8 | 0:4.5.0-23.3.0.1.module+el8.0.0.z+5234+5e9073e3 |
| lua-guestfs | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| nbdkit | ol 8 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| nbdkit-bash-completion | ol 8 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| nbdkit-basic-plugins | ol 8 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| nbdkit-devel | ol 8 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| nbdkit-example-plugins | ol 8 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| nbdkit-plugin-gzip | ol 8 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| nbdkit-plugin-python-common | ol 8 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| nbdkit-plugin-python3 | ol 8 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| nbdkit-plugin-vddk | ol 8 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| nbdkit-plugin-xz | ol 8 | 0:1.4.2-4.module+el8.0.0.z+5234+5e9073e3 |
| netcf | ol 8 | 0:0.2.8-10.module+el8.0.0.z+5234+5e9073e3 |
| netcf-devel | ol 8 | 0:0.2.8-10.module+el8.0.0.z+5234+5e9073e3 |
| netcf-libs | ol 8 | 0:0.2.8-10.module+el8.0.0.z+5234+5e9073e3 |
| perl-Sys-Guestfs | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| perl-Sys-Virt | ol 8 | 0:4.5.0-4.module+el8.0.0.z+5234+5e9073e3 |
| perl-hivex | ol 8 | 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3 |
| python3-hivex | ol 8 | 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3 |
| python3-libguestfs | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| python3-libvirt | ol 8 | 0:4.5.0-1.module+el8.0.0.z+5234+5e9073e3 |
| qemu-guest-agent | ol 8 | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| qemu-img | ol 8 | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| qemu-kvm | ol 8 | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| qemu-kvm-block-curl | ol 8 | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| qemu-kvm-block-gluster | ol 8 | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| qemu-kvm-block-iscsi | ol 8 | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| qemu-kvm-block-rbd | ol 8 | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| qemu-kvm-block-ssh | ol 8 | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| qemu-kvm-common | ol 8 | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| qemu-kvm-core | ol 8 | 15:2.12.0-64.module+el8.0.0.z+5234+5e9073e3.2 |
| ruby-hivex | ol 8 | 0:1.3.15-6.module+el8.0.0.z+5234+5e9073e3 |
| ruby-libguestfs | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| seabios | ol 8 | 0:1.11.1-3.module+el8.0.0.z+5234+5e9073e3 |
| seabios-bin | ol 8 | 0:1.11.1-3.module+el8.0.0.z+5234+5e9073e3 |
| seavgabios-bin | ol 8 | 0:1.11.1-3.module+el8.0.0.z+5234+5e9073e3 |
| sgabios | ol 8 | 1:0.20170427git-2.module+el8.0.0.z+5234+5e9073e3 |
| sgabios-bin | ol 8 | 1:0.20170427git-2.module+el8.0.0.z+5234+5e9073e3 |
| supermin | ol 8 | 0:5.1.19-8.module+el8.0.0.z+5234+5e9073e3 |
| supermin-devel | ol 8 | 0:5.1.19-8.module+el8.0.0.z+5234+5e9073e3 |
| virt-dib | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| virt-p2v-maker | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
| virt-v2v | ol 8 | 1:1.38.4-10.1.0.1.module+el8.0.0.z+5234+5e9073e3 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2019-10168 | hivex: The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and o... | 8.8 | 0.0055 | None reported | |
| High | CVE-2019-10167 | hivex: The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and o... | 8.8 | 0.0052 | None reported | |
| High | CVE-2019-10161 | hivex: The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and o... | 8.8 | 0.0052 | None reported | |
| High | CVE-2019-10166 | libssh2: The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and o... | 7.8 | 0.0047 | None reported |
Showing 1 to 4 of 4
1