Linux · Security advisory · May 14, 2019
RHSA-2019:1175: Security update for 97 packages
RHSA-2019:1175, released May 14, 2019, fixes 9 CVEs across 97 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0929
95th percentile
Priority of the 9 CVEs
Patch now 0
Urgent 0
High 5
Routine 4
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| SLOF | RHEL 8 | 0:20171214-5.gitfa98132.module+el8.0.0+3075+09be6b65 |
| hivex | RHEL 8 | 0:1.3.15-6.module+el8.0.0+3075+09be6b65 |
| hivex-devel | RHEL 8 | 0:1.3.15-6.module+el8.0.0+3075+09be6b65 |
| libguestfs | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-bash-completion | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-benchmarking | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-devel | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-gfs2 | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-gobject | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-gobject-devel | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-inspect-icons | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-java | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-java-devel | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-javadoc | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-man-pages-ja | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-man-pages-uk | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-rescue | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-rsync | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-tools | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-tools-c | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libguestfs-winsupport | RHEL 8 | 0:8.0-2.module+el8.0.0+3075+09be6b65 |
| libguestfs-xfs | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| libiscsi | RHEL 8 | 0:1.18.0-6.module+el8.0.0+3075+09be6b65 |
| libiscsi-devel | RHEL 8 | 0:1.18.0-6.module+el8.0.0+3075+09be6b65 |
| libiscsi-utils | RHEL 8 | 0:1.18.0-6.module+el8.0.0+3075+09be6b65 |
| libssh2 | RHEL 8 | 0:1.8.0-7.module+el8.0.0+3075+09be6b65.1 |
| libvirt | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-admin | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-bash-completion | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-client | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-config-network | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-config-nwfilter | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-interface | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-network | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-nodedev | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-nwfilter | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-qemu | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-secret | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-storage | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-storage-core | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-storage-disk | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-storage-gluster | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-storage-iscsi | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-storage-logical | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-storage-mpath | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-storage-rbd | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-driver-storage-scsi | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-daemon-kvm | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-dbus | RHEL 8 | 0:1.2.0-2.module+el8.0.0+3075+09be6b65 |
| libvirt-devel | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-docs | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-libs | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-lock-sanlock | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| libvirt-nss | RHEL 8 | 0:4.5.0-23.1.module+el8.0.0+3151+3ba813f9 |
| lua-guestfs | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| nbdkit | RHEL 8 | 0:1.4.2-4.module+el8.0.0+3075+09be6b65 |
| nbdkit-bash-completion | RHEL 8 | 0:1.4.2-4.module+el8.0.0+3075+09be6b65 |
| nbdkit-basic-plugins | RHEL 8 | 0:1.4.2-4.module+el8.0.0+3075+09be6b65 |
| nbdkit-devel | RHEL 8 | 0:1.4.2-4.module+el8.0.0+3075+09be6b65 |
| nbdkit-example-plugins | RHEL 8 | 0:1.4.2-4.module+el8.0.0+3075+09be6b65 |
| nbdkit-plugin-gzip | RHEL 8 | 0:1.4.2-4.module+el8.0.0+3075+09be6b65 |
| nbdkit-plugin-python-common | RHEL 8 | 0:1.4.2-4.module+el8.0.0+3075+09be6b65 |
| nbdkit-plugin-python3 | RHEL 8 | 0:1.4.2-4.module+el8.0.0+3075+09be6b65 |
| nbdkit-plugin-vddk | RHEL 8 | 0:1.4.2-4.module+el8.0.0+3075+09be6b65 |
| nbdkit-plugin-xz | RHEL 8 | 0:1.4.2-4.module+el8.0.0+3075+09be6b65 |
| netcf | RHEL 8 | 0:0.2.8-10.module+el8.0.0+3075+09be6b65 |
| netcf-devel | RHEL 8 | 0:0.2.8-10.module+el8.0.0+3075+09be6b65 |
| netcf-libs | RHEL 8 | 0:0.2.8-10.module+el8.0.0+3075+09be6b65 |
| perl-Sys-Guestfs | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| perl-Sys-Virt | RHEL 8 | 0:4.5.0-4.module+el8.0.0+3075+09be6b65 |
| perl-hivex | RHEL 8 | 0:1.3.15-6.module+el8.0.0+3075+09be6b65 |
| python3-hivex | RHEL 8 | 0:1.3.15-6.module+el8.0.0+3075+09be6b65 |
| python3-libguestfs | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| python3-libvirt | RHEL 8 | 0:4.5.0-1.module+el8.0.0+3075+09be6b65 |
| qemu-guest-agent | RHEL 8 | 15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2 |
| qemu-img | RHEL 8 | 15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2 |
| qemu-kvm | RHEL 8 | 15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2 |
| qemu-kvm-block-curl | RHEL 8 | 15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2 |
| qemu-kvm-block-gluster | RHEL 8 | 15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2 |
| qemu-kvm-block-iscsi | RHEL 8 | 15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2 |
| qemu-kvm-block-rbd | RHEL 8 | 15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2 |
| qemu-kvm-block-ssh | RHEL 8 | 15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2 |
| qemu-kvm-common | RHEL 8 | 15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2 |
| qemu-kvm-core | RHEL 8 | 15:2.12.0-64.module+el8.0.0+3180+d6a3561d.2 |
| ruby-hivex | RHEL 8 | 0:1.3.15-6.module+el8.0.0+3075+09be6b65 |
| ruby-libguestfs | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| seabios | RHEL 8 | 0:1.11.1-3.module+el8.0.0+3075+09be6b65 |
| seabios-bin | RHEL 8 | 0:1.11.1-3.module+el8.0.0+3075+09be6b65 |
| seavgabios-bin | RHEL 8 | 0:1.11.1-3.module+el8.0.0+3075+09be6b65 |
| sgabios | RHEL 8 | 1:0.20170427git-2.module+el8.0.0+3075+09be6b65 |
| sgabios-bin | RHEL 8 | 1:0.20170427git-2.module+el8.0.0+3075+09be6b65 |
| supermin | RHEL 8 | 0:5.1.19-8.module+el8.0.0+3075+09be6b65 |
| supermin-devel | RHEL 8 | 0:5.1.19-8.module+el8.0.0+3075+09be6b65 |
| virt-dib | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| virt-p2v-maker | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
| virt-v2v | RHEL 8 | 1:1.38.4-10.module+el8.0.0+3075+09be6b65 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2019-3855 | libvirt-daemon-driver-storage-disk: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 8.8 | 0.0929 | None reported | |
| High | CVE-2019-3856 | libguestfs-man-pages-uk: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 8.8 | 0.0613 | None reported | |
| High | CVE-2019-3857 | hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 8.8 | 0.0613 | None reported | |
| High | CVE-2018-20815 | qemu-system-x86: In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflo... | 9.8 | 0.0443 | None reported | |
| High | CVE-2019-3863 | hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 8.8 | 0.0344 | None reported | |
| Routine | CVE-2018-12130 | libiscsi: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.2 | 0.0155 | None reported | |
| Routine | CVE-2018-12126 | qemu-kvm: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.5 | 0.0151 | None reported | |
| Routine | CVE-2018-12127 | libvirt: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms | 6.5 | 0.0150 | None reported | |
| Routine | CVE-2019-11091 | libnss-libvirt: Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheablememory on some microprocessors utilizing spec... | 5.6 | 0.0061 | None reported |
Showing 1 to 9 of 9
1