Linux · Oracle Linux · Security advisory · November 14, 2019

ELSA-2019-3345: Security update for 100 packages

ELSA-2019-3345, released November 14, 2019, fixes 3 CVEs across 100 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0555
92nd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 2 Routine 1

Fixed package versions

ProductReleaseFixed in
hivexol 80:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
hivex-develol 80:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
libguestfsol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-bash-completionol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-benchmarkingol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-develol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-gfs2ol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-gobjectol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-gobject-develol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-inspect-iconsol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-javaol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-java-develol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-javadocol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-man-pages-jaol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-man-pages-ukol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-rescueol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-rsyncol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-toolsol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-tools-col 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libguestfs-winsupportol 80:8.0-4.module+el8.1.0+5378+c5e0f4d7
libguestfs-xfsol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
libiscsiol 80:1.18.0-8.module+el8.1.0+5378+c5e0f4d7
libiscsi-develol 80:1.18.0-8.module+el8.1.0+5378+c5e0f4d7
libiscsi-utilsol 80:1.18.0-8.module+el8.1.0+5378+c5e0f4d7
libvirtol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-adminol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-bash-completionol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-clientol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemonol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-config-networkol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-config-nwfilterol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-interfaceol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-networkol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-nodedevol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-nwfilterol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-qemuol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-secretol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-storageol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-storage-coreol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-storage-diskol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-storage-glusterol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-storage-iscsiol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-storage-logicalol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-storage-mpathol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-storage-rbdol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-driver-storage-scsiol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-daemon-kvmol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-dbusol 80:1.2.0-3.module+el8.1.0+5378+c5e0f4d7
libvirt-develol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-docsol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-libsol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-lock-sanlockol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
libvirt-nssol 80:4.5.0-35.0.1.module+el8.1.0+5378+c5e0f4d7
lua-guestfsol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
nbdkitol 80:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
nbdkit-bash-completionol 80:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
nbdkit-basic-pluginsol 80:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
nbdkit-develol 80:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
nbdkit-example-pluginsol 80:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
nbdkit-plugin-gzipol 80:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
nbdkit-plugin-python-commonol 80:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
nbdkit-plugin-python3ol 80:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
nbdkit-plugin-vddkol 80:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
nbdkit-plugin-xzol 80:1.4.2-5.module+el8.1.0+5378+c5e0f4d7
netcfol 80:0.2.8-12.module+el8.1.0+5378+c5e0f4d7
netcf-develol 80:0.2.8-12.module+el8.1.0+5378+c5e0f4d7
netcf-libsol 80:0.2.8-12.module+el8.1.0+5378+c5e0f4d7
ocaml-hivexol 80:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
ocaml-hivex-develol 80:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
ocaml-libguestfsol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
ocaml-libguestfs-develol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
perl-Sys-Guestfsol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
perl-Sys-Virtol 80:4.5.0-5.module+el8.1.0+5378+c5e0f4d7
perl-hivexol 80:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
python3-hivexol 80:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
python3-libguestfsol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
python3-libvirtol 80:4.5.0-2.module+el8.1.0+5378+c5e0f4d7
qemu-guest-agentol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
qemu-imgol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
qemu-kvmol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
qemu-kvm-block-curlol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
qemu-kvm-block-glusterol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
qemu-kvm-block-iscsiol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
qemu-kvm-block-rbdol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
qemu-kvm-block-sshol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
qemu-kvm-commonol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
qemu-kvm-coreol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
qemu-kvm-testsol 815:2.12.0-88.0.1.module+el8.1.0+5378+c5e0f4d7
ruby-hivexol 80:1.3.15-7.module+el8.1.0+5378+c5e0f4d7
ruby-libguestfsol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
seabiosol 80:1.11.1-4.module+el8.1.0+5378+c5e0f4d7
seabios-binol 80:1.11.1-4.module+el8.1.0+5378+c5e0f4d7
seavgabios-binol 80:1.11.1-4.module+el8.1.0+5378+c5e0f4d7
sgabiosol 81:0.20170427git-3.module+el8.1.0+5378+c5e0f4d7
sgabios-binol 81:0.20170427git-3.module+el8.1.0+5378+c5e0f4d7
superminol 80:5.1.19-9.module+el8.1.0+5378+c5e0f4d7
supermin-develol 80:5.1.19-9.module+el8.1.0+5378+c5e0f4d7
virt-dibol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
virt-p2v-makerol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7
virt-v2vol 81:1.38.4-14.0.1.module+el8.1.0+5378+c5e0f4d7

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2019-12155 qemu-system-x86-xen: interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.7.5 0.0555 None reported
High CVE-2019-9755 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms7.0 0.0053 None reported
Routine CVE-2019-9824 hivex: Kernel-based Virtual Machine (KVM) offers a full virtualization solution for Linux on numerous hardware platforms5.5 0.0050 None reported
Showing 1 to 3 of 3 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.