Linux · Security advisory · July 30, 2019
ELSA-2019-0980: Security update for 11 packages
ELSA-2019-0980, released July 30, 2019, fixes 2 CVEs across 11 products. One of them is being exploited (CVE-2019-0211); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
2
None rated Critical
Exploited
1
CVE-2019-0211
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.6501
99th percentile
Priority of the 2 CVEs
Patch now 1
Urgent 0
High 1
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| httpd | ol 8 | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| httpd-devel | ol 8 | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| httpd-filesystem | ol 8 | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| httpd-manual | ol 8 | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| httpd-tools | ol 8 | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| mod_http2 | ol 8 | 0:1.11.3-2.module+el8.0.0+5209+a98d70d6 |
| mod_ldap | ol 8 | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| mod_md | ol 8 | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| mod_proxy_html | ol 8 | 1:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| mod_session | ol 8 | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| mod_ssl | ol 8 | 1:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2019-0211 | apache2: In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privil... | 8.8 | 0.6501 | KEVExploited | |
| High | CVE-2019-0215 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es... | 7.5 | 0.1037 | None reported |
Showing 1 to 2 of 2
1