Linux · Security advisory · November 5, 2019

RHSA-2019:3583: Security update for 24 packages

RHSA-2019:3583, released November 5, 2019, fixes 2 CVEs across 24 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0224
82nd percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
createrepo_cRHEL 80:0.11.0-3.el8
createrepo_c-develRHEL 80:0.11.0-3.el8
createrepo_c-libsRHEL 80:0.11.0-3.el8
dnfRHEL 80:4.2.7-6.el8
dnf-automaticRHEL 80:4.2.7-6.el8
dnf-dataRHEL 80:4.2.7-6.el8
dnf-plugins-coreRHEL 80:4.0.8-3.el8
libcompsRHEL 80:0.1.11-2.el8
libcomps-develRHEL 80:0.1.11-2.el8
libdnfRHEL 80:0.35.1-8.el8
librepoRHEL 80:1.10.3-3.el8
librhsmRHEL 80:0.0.3-3.el8
libsolvRHEL 80:0.7.4-3.el8
microdnfRHEL 80:3.0.1-3.el8
python3-createrepo_cRHEL 80:0.11.0-3.el8
python3-dnfRHEL 80:4.2.7-6.el8
python3-dnf-plugin-versionlockRHEL 80:4.0.8-3.el8
python3-dnf-plugins-coreRHEL 80:4.0.8-3.el8
python3-hawkeyRHEL 80:0.35.1-8.el8
python3-libcompsRHEL 80:0.1.11-2.el8
python3-libdnfRHEL 80:0.35.1-8.el8
python3-librepoRHEL 80:1.10.3-3.el8
yumRHEL 80:4.2.7-6.el8
yum-utilsRHEL 80:4.0.8-3.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2019-3817 createrepo_c: Yum is a command-line utility that allows the user to check for updates and automatically download and install update... 8.8 0.0172 None reported
Routine CVE-2018-20534 createrepo_c: Yum is a command-line utility that allows the user to check for updates and automatically download and install update... 6.5 0.0224 None reported
Showing 1 to 2 of 2 1