RHSA-2019:1580: Security update for 97 packages

RHSA-2019:1580, released June 20, 2019, fixes 4 CVEs across 97 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

8.8

Base score, 0 to 10

Highest EPSS

0.0055

46th percentile

Priority of the 4 CVEs

Patch now 0
                                Urgent 0
                                High 4
                                Routine 0

Fixed package versions

Product	Release	Fixed in
SLOF	RHEL 8	0:20171214-5.gitfa98132.module+el8.0.0.z+3418+a72cf898
hivex	RHEL 8	0:1.3.15-6.module+el8.0.0.z+3418+a72cf898
hivex-devel	RHEL 8	0:1.3.15-6.module+el8.0.0.z+3418+a72cf898
libguestfs	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-bash-completion	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-benchmarking	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-devel	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-gfs2	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-gobject	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-gobject-devel	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-inspect-icons	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-java	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-java-devel	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-javadoc	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-man-pages-ja	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-man-pages-uk	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-rescue	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-rsync	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-tools	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-tools-c	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libguestfs-winsupport	RHEL 8	0:8.0-2.module+el8.0.0.z+3418+a72cf898
libguestfs-xfs	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
libiscsi	RHEL 8	0:1.18.0-6.module+el8.0.0.z+3418+a72cf898
libiscsi-devel	RHEL 8	0:1.18.0-6.module+el8.0.0.z+3418+a72cf898
libiscsi-utils	RHEL 8	0:1.18.0-6.module+el8.0.0.z+3418+a72cf898
libssh2	RHEL 8	0:1.8.0-7.module+el8.0.0.z+3418+a72cf898.1
libvirt	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-admin	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-bash-completion	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-client	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-config-network	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-config-nwfilter	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-interface	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-network	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-nodedev	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-nwfilter	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-qemu	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-secret	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-storage	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-storage-core	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-storage-disk	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-storage-gluster	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-storage-iscsi	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-storage-logical	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-storage-mpath	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-storage-rbd	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-driver-storage-scsi	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-daemon-kvm	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-dbus	RHEL 8	0:1.2.0-2.module+el8.0.0.z+3418+a72cf898
libvirt-devel	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-docs	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-libs	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-lock-sanlock	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
libvirt-nss	RHEL 8	0:4.5.0-23.3.module+el8.0.0.z+3418+a72cf898
lua-guestfs	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
nbdkit	RHEL 8	0:1.4.2-4.module+el8.0.0.z+3418+a72cf898
nbdkit-bash-completion	RHEL 8	0:1.4.2-4.module+el8.0.0.z+3418+a72cf898
nbdkit-basic-plugins	RHEL 8	0:1.4.2-4.module+el8.0.0.z+3418+a72cf898
nbdkit-devel	RHEL 8	0:1.4.2-4.module+el8.0.0.z+3418+a72cf898
nbdkit-example-plugins	RHEL 8	0:1.4.2-4.module+el8.0.0.z+3418+a72cf898
nbdkit-plugin-gzip	RHEL 8	0:1.4.2-4.module+el8.0.0.z+3418+a72cf898
nbdkit-plugin-python-common	RHEL 8	0:1.4.2-4.module+el8.0.0.z+3418+a72cf898
nbdkit-plugin-python3	RHEL 8	0:1.4.2-4.module+el8.0.0.z+3418+a72cf898
nbdkit-plugin-vddk	RHEL 8	0:1.4.2-4.module+el8.0.0.z+3418+a72cf898
nbdkit-plugin-xz	RHEL 8	0:1.4.2-4.module+el8.0.0.z+3418+a72cf898
netcf	RHEL 8	0:0.2.8-10.module+el8.0.0.z+3418+a72cf898
netcf-devel	RHEL 8	0:0.2.8-10.module+el8.0.0.z+3418+a72cf898
netcf-libs	RHEL 8	0:0.2.8-10.module+el8.0.0.z+3418+a72cf898
perl-Sys-Guestfs	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
perl-Sys-Virt	RHEL 8	0:4.5.0-4.module+el8.0.0.z+3418+a72cf898
perl-hivex	RHEL 8	0:1.3.15-6.module+el8.0.0.z+3418+a72cf898
python3-hivex	RHEL 8	0:1.3.15-6.module+el8.0.0.z+3418+a72cf898
python3-libguestfs	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
python3-libvirt	RHEL 8	0:4.5.0-1.module+el8.0.0.z+3418+a72cf898
qemu-guest-agent	RHEL 8	15:2.12.0-64.module+el8.0.0.z+3418+a72cf898.2
qemu-img	RHEL 8	15:2.12.0-64.module+el8.0.0.z+3418+a72cf898.2
qemu-kvm	RHEL 8	15:2.12.0-64.module+el8.0.0.z+3418+a72cf898.2
qemu-kvm-block-curl	RHEL 8	15:2.12.0-64.module+el8.0.0.z+3418+a72cf898.2
qemu-kvm-block-gluster	RHEL 8	15:2.12.0-64.module+el8.0.0.z+3418+a72cf898.2
qemu-kvm-block-iscsi	RHEL 8	15:2.12.0-64.module+el8.0.0.z+3418+a72cf898.2
qemu-kvm-block-rbd	RHEL 8	15:2.12.0-64.module+el8.0.0.z+3418+a72cf898.2
qemu-kvm-block-ssh	RHEL 8	15:2.12.0-64.module+el8.0.0.z+3418+a72cf898.2
qemu-kvm-common	RHEL 8	15:2.12.0-64.module+el8.0.0.z+3418+a72cf898.2
qemu-kvm-core	RHEL 8	15:2.12.0-64.module+el8.0.0.z+3418+a72cf898.2
ruby-hivex	RHEL 8	0:1.3.15-6.module+el8.0.0.z+3418+a72cf898
ruby-libguestfs	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
seabios	RHEL 8	0:1.11.1-3.module+el8.0.0.z+3418+a72cf898
seabios-bin	RHEL 8	0:1.11.1-3.module+el8.0.0.z+3418+a72cf898
seavgabios-bin	RHEL 8	0:1.11.1-3.module+el8.0.0.z+3418+a72cf898
sgabios	RHEL 8	1:0.20170427git-2.module+el8.0.0.z+3418+a72cf898
sgabios-bin	RHEL 8	1:0.20170427git-2.module+el8.0.0.z+3418+a72cf898
supermin	RHEL 8	0:5.1.19-8.module+el8.0.0.z+3418+a72cf898
supermin-devel	RHEL 8	0:5.1.19-8.module+el8.0.0.z+3418+a72cf898
virt-dib	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
virt-p2v-maker	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898
virt-v2v	RHEL 8	1:1.38.4-10.1.module+el8.0.0.z+3418+a72cf898

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2019-10168	hivex: The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and o...	8.8	0.0055	None reported
High	CVE-2019-10167	hivex: The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and o...	8.8	0.0052	None reported
High	CVE-2019-10161	hivex: The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and o...	8.8	0.0052	None reported
High	CVE-2019-10166	libssh2: The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and o...	7.8	0.0047	None reported

Also fixes CVE-2019-10168

ELSA-2019-1580
hivex, hivex-devel, libguestfs and 93 more on ol 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2019:1580

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/rhsa-2019-1580">RHSA-2019:1580 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.