Linux · Security advisory · November 5, 2019

RHSA-2019:3345: Security update for 101 packages

RHSA-2019:3345, released November 5, 2019, fixes 3 CVEs across 101 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0555
92nd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 2 Routine 1

Fixed package versions

ProductReleaseFixed in
SLOFRHEL 80:20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab
hivexRHEL 80:1.3.15-7.module+el8.1.0+4066+0f1aadab
hivex-develRHEL 80:1.3.15-7.module+el8.1.0+4066+0f1aadab
libguestfsRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-bash-completionRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-benchmarkingRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-develRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-gfs2RHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-gobjectRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-gobject-develRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-inspect-iconsRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-javaRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-java-develRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-javadocRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-man-pages-jaRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-man-pages-ukRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-rescueRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-rsyncRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-toolsRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-tools-cRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libguestfs-winsupportRHEL 80:8.0-4.module+el8.1.0+4066+0f1aadab
libguestfs-xfsRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
libiscsiRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-develRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libiscsi-utilsRHEL 80:1.18.0-8.module+el8.1.0+4066+0f1aadab
libvirtRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-adminRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-bash-completionRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-clientRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemonRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-config-networkRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-config-nwfilterRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-interfaceRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-networkRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-nodedevRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-nwfilterRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-qemuRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-secretRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-storageRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-storage-coreRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-storage-diskRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-storage-glusterRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-storage-iscsiRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-storage-logicalRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-storage-mpathRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-storage-rbdRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-driver-storage-scsiRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-daemon-kvmRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-dbusRHEL 80:1.2.0-3.module+el8.1.0+4066+0f1aadab
libvirt-develRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-docsRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-libsRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-lock-sanlockRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
libvirt-nssRHEL 80:4.5.0-35.module+el8.1.0+4227+b2722cb3
lua-guestfsRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
nbdkitRHEL 80:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-bash-completionRHEL 80:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-basic-pluginsRHEL 80:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-develRHEL 80:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-example-pluginsRHEL 80:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-gzipRHEL 80:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-python-commonRHEL 80:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-python3RHEL 80:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-vddkRHEL 80:1.4.2-5.module+el8.1.0+4066+0f1aadab
nbdkit-plugin-xzRHEL 80:1.4.2-5.module+el8.1.0+4066+0f1aadab
netcfRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-develRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
netcf-libsRHEL 80:0.2.8-12.module+el8.1.0+4066+0f1aadab
ocaml-hivexRHEL 80:1.3.15-7.module+el8.1.0+4066+0f1aadab
ocaml-hivex-develRHEL 80:1.3.15-7.module+el8.1.0+4066+0f1aadab
ocaml-libguestfsRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
ocaml-libguestfs-develRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
perl-Sys-GuestfsRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
perl-Sys-VirtRHEL 80:4.5.0-5.module+el8.1.0+4066+0f1aadab
perl-hivexRHEL 80:1.3.15-7.module+el8.1.0+4066+0f1aadab
python3-hivexRHEL 80:1.3.15-7.module+el8.1.0+4066+0f1aadab
python3-libguestfsRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
python3-libvirtRHEL 80:4.5.0-2.module+el8.1.0+4066+0f1aadab
qemu-guest-agentRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
qemu-imgRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
qemu-kvmRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
qemu-kvm-block-curlRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
qemu-kvm-block-glusterRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
qemu-kvm-block-iscsiRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
qemu-kvm-block-rbdRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
qemu-kvm-block-sshRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
qemu-kvm-commonRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
qemu-kvm-coreRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
qemu-kvm-testsRHEL 815:2.12.0-88.module+el8.1.0+4233+bc44be3f
ruby-hivexRHEL 80:1.3.15-7.module+el8.1.0+4066+0f1aadab
ruby-libguestfsRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
seabiosRHEL 80:1.11.1-4.module+el8.1.0+4066+0f1aadab
seabios-binRHEL 80:1.11.1-4.module+el8.1.0+4066+0f1aadab
seavgabios-binRHEL 80:1.11.1-4.module+el8.1.0+4066+0f1aadab
sgabiosRHEL 81:0.20170427git-3.module+el8.1.0+4066+0f1aadab
sgabios-binRHEL 81:0.20170427git-3.module+el8.1.0+4066+0f1aadab
superminRHEL 80:5.1.19-9.module+el8.1.0+4066+0f1aadab
supermin-develRHEL 80:5.1.19-9.module+el8.1.0+4066+0f1aadab
virt-dibRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
virt-p2v-makerRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab
virt-v2vRHEL 81:1.38.4-14.module+el8.1.0+4066+0f1aadab

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-12155 qemu-system-x86-xen: interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference. 7.5 0.0555 None reported
High CVE-2019-9755 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 7.0 0.0053 None reported
Routine CVE-2019-9824 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms 5.5 0.0052 None reported
Showing 1 to 3 of 3 1