Linux · Security advisory · May 14, 2019
RHSA-2019:1167: Security update for 23 packages
RHSA-2019:1167, released May 14, 2019, fixes 5 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: Routine.
Routine
CVEs closed
5
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0475
91st percentile
Priority of the 5 CVEs
Patch now 0
Urgent 0
High 0
Routine 5
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| bpftool | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-abi-whitelists | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-core | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-debug | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-debug-core | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-debug-devel | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-debug-modules | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-debug-modules-extra | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-devel | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-doc | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-modules | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-modules-extra | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-tools | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-tools-libs | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-tools-libs-devel | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-zfcpdump | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-zfcpdump-core | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-zfcpdump-devel | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-zfcpdump-modules | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| kernel-zfcpdump-modules-extra | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| perf | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
| python3-perf | RHEL 8 | 0:4.18.0-80.1.2.el8_0 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Routine | CVE-2019-9003 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * A flaw wa... | 4.4 | 0.0475 | None reported | |
| Routine | CVE-2018-12130 | libiscsi: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.2 | 0.0155 | None reported | |
| Routine | CVE-2018-12126 | qemu-kvm: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.5 | 0.0151 | None reported | |
| Routine | CVE-2018-12127 | libvirt: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.5 | 0.0150 | None reported | |
| Routine | CVE-2019-11091 | libnss-libvirt: Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheablememory on some microprocessors utilizing spec... | 5.6 | 0.0061 | None reported |
Showing 1 to 5 of 5
1