Linux · Oracle Linux · Security advisory · July 30, 2019

ELSA-2019-1175: Security update for 96 packages

ELSA-2019-1175, released July 30, 2019, fixes 9 CVEs across 96 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
9
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0929
95th percentile

Priority of the 9 CVEs

Patch now 0 Urgent 0 High 5 Routine 4

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.15-6.module+el8.0.0+5219+3c0c6858
hivex-develol 80:1.3.15-6.module+el8.0.0+5219+3c0c6858
libguestfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-bash-completionol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-benchmarkingol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-develol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-gfs2ol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-gobjectol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-gobject-develol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-inspect-iconsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-javaol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-java-develol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-javadocol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-man-pages-jaol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-man-pages-ukol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-rescueol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-rsyncol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-toolsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-tools-col 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libguestfs-winsupportol 80:8.0-2.module+el8.0.0+5219+3c0c6858
libguestfs-xfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
libiscsiol 80:1.18.0-6.module+el8.0.0+5219+3c0c6858
libiscsi-develol 80:1.18.0-6.module+el8.0.0+5219+3c0c6858
libiscsi-utilsol 80:1.18.0-6.module+el8.0.0+5219+3c0c6858
libssh2ol 80:1.8.0-7.module+el8.0.0+5219+3c0c6858.1
libvirtol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-adminol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-bash-completionol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-clientol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemonol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-config-networkol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-config-nwfilterol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-interfaceol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-networkol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-nodedevol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-nwfilterol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-qemuol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-secretol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storageol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-coreol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-diskol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-glusterol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-iscsiol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-logicalol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-mpathol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-rbdol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-driver-storage-scsiol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-daemon-kvmol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-dbusol 80:1.2.0-2.module+el8.0.0+5219+3c0c6858
libvirt-develol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-docsol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-libsol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-lock-sanlockol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
libvirt-nssol 80:4.5.0-23.1.0.1.module+el8.0.0+5219+3c0c6858
lua-guestfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
nbdkitol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-bash-completionol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-basic-pluginsol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-develol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-example-pluginsol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-plugin-gzipol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-plugin-python-commonol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-plugin-python3ol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-plugin-vddkol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
nbdkit-plugin-xzol 80:1.4.2-4.module+el8.0.0+5219+3c0c6858
netcfol 80:0.2.8-10.module+el8.0.0+5219+3c0c6858
netcf-develol 80:0.2.8-10.module+el8.0.0+5219+3c0c6858
netcf-libsol 80:0.2.8-10.module+el8.0.0+5219+3c0c6858
perl-Sys-Guestfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
perl-Sys-Virtol 80:4.5.0-4.module+el8.0.0+5219+3c0c6858
perl-hivexol 80:1.3.15-6.module+el8.0.0+5219+3c0c6858
python3-hivexol 80:1.3.15-6.module+el8.0.0+5219+3c0c6858
python3-libguestfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
python3-libvirtol 80:4.5.0-1.module+el8.0.0+5219+3c0c6858
qemu-guest-agentol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-imgol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvmol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-block-curlol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-block-glusterol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-block-iscsiol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-block-rbdol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-block-sshol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-commonol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
qemu-kvm-coreol 815:2.12.0-64.module+el8.0.0+5219+3c0c6858.2
ruby-hivexol 80:1.3.15-6.module+el8.0.0+5219+3c0c6858
ruby-libguestfsol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
seabiosol 80:1.11.1-3.module+el8.0.0+5219+3c0c6858
seabios-binol 80:1.11.1-3.module+el8.0.0+5219+3c0c6858
seavgabios-binol 80:1.11.1-3.module+el8.0.0+5219+3c0c6858
sgabiosol 81:0.20170427git-2.module+el8.0.0+5219+3c0c6858
sgabios-binol 81:0.20170427git-2.module+el8.0.0+5219+3c0c6858
superminol 80:5.1.19-8.module+el8.0.0+5219+3c0c6858
supermin-develol 80:5.1.19-8.module+el8.0.0+5219+3c0c6858
virt-dibol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
virt-p2v-makerol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858
virt-v2vol 81:1.38.4-10.0.1.module+el8.0.0+5219+3c0c6858

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2019-3855 libvirt-daemon-driver-storage-disk: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms8.8 0.0929 None reported
High CVE-2019-3856 libguestfs-man-pages-uk: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms8.8 0.0613 None reported
High CVE-2019-3857 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms8.8 0.0613 None reported
High CVE-2018-20815 qemu-system-x86: In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflo...9.8 0.0443 None reported
High CVE-2019-3863 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms8.8 0.0344 None reported
Routine CVE-2018-12130 libiscsi: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.2 0.0157 None reported
Routine CVE-2018-12126 qemu-kvm: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0151 None reported
Routine CVE-2018-12127 libvirt: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms6.5 0.0151 None reported
Routine CVE-2019-11091 libnss-libvirt: Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheablememory on some microprocessors utilizing spec...5.6 0.0061 None reported
Showing 1 to 9 of 9 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.