Linux · Security advisory · January 3, 2020

ELSA-2019-4269: Security update for 19 packages

ELSA-2019-4269, released January 3, 2020, fixes 3 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8343
99th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
buildahol 80:1.9.0-5.0.1.module+el8.1.0+5440+994fc847
buildah-testsol 80:1.9.0-5.0.1.module+el8.1.0+5440+994fc847
cockpit-podmanol 80:4-1.module+el8.1.0+5440+994fc847
container-selinuxol 82:2.123.0-2.module+el8.1.0+5460+5d763c32
containernetworking-pluginsol 80:0.8.1-3.0.1.module+el8.1.0+5460+5d763c32
containers-commonol 81:0.1.37-6.0.1.module+el8.1.0+5460+5d763c32
fuse-overlayfsol 80:0.4.1-1.module+el8.1.0+5440+994fc847
oci-systemd-hookol 81:0.1.15-2.git2d0b8a3.module+el8.1.0+5440+994fc847
oci-umountol 82:2.3.4-2.git87f9237.module+el8.1.0+5440+994fc847
podmanol 80:1.4.2-6.0.1.module+el8.1.0+5460+5d763c32
podman-dockerol 80:1.4.2-6.0.1.module+el8.1.0+5460+5d763c32
podman-manpagesol 80:1.4.2-6.0.1.module+el8.1.0+5460+5d763c32
podman-remoteol 80:1.4.2-6.0.1.module+el8.1.0+5460+5d763c32
podman-testsol 80:1.4.2-6.0.1.module+el8.1.0+5460+5d763c32
python-podman-apiol 80:1.2.0-0.1.gitd0a45fe.module+el8.1.0+5440+994fc847
runcol 80:1.0.0-61.rc8.module+el8.1.0+5460+5d763c32
skopeool 81:0.1.37-6.0.1.module+el8.1.0+5460+5d763c32
skopeo-testsol 81:0.1.37-6.0.1.module+el8.1.0+5460+5d763c32
slirp4netnsol 80:0.3.0-4.module+el8.1.0+5440+994fc847

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-9512 HTTP/2 Server Denial of Service Vulnerability 7.5 0.8343 Exploitation Less Likely
High CVE-2019-9514 HTTP/2 Server Denial of Service Vulnerability 7.5 0.8281 Exploitation Less Likely
High CVE-2019-16884 buildah: The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Se... 7.5 0.0441 None reported
Showing 1 to 3 of 3 1