Linux · Security advisory · August 19, 2019

ELSA-2019-2002: Security update for 3 packages

ELSA-2019-2002, released August 19, 2019, fixes 2 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.2562

97th percentile

Priority of the 2 CVEs

Patch now 0
                                Urgent 0
                                High 2
                                Routine 0

Fixed package versions

Product	Release	Fixed in
redis	ol 8	0:5.0.3-2.module+el8.0.0.z+5250+19ca22c8
redis-devel	ol 8	0:5.0.3-2.module+el8.0.0.z+5250+19ca22c8
redis-doc	ol 8	0:5.0.3-2.module+el8.0.0.z+5250+19ca22c8

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2019-10192	redis: Redis is an advanced key-value store		7.2	0.2562	None reported
High	CVE-2019-10193	redis: Redis is an advanced key-value store		7.2	0.2330	None reported

Also fixes CVE-2019-10192

RHSA-2019:2002
redis, redis-devel, redis-doc on RHEL 8
redis 5:4.0.9-1ubuntu0.2
redis on Ubuntu 18.04.6 LTS (bionic)
redis-sentinel 5:4.0.9-1ubuntu0.2
redis-sentinel on Ubuntu 18.04.6 LTS (bionic)
redis-server 5:4.0.9-1ubuntu0.2
redis-server on Ubuntu 18.04.6 LTS (bionic)
redis-tools 5:4.0.9-1ubuntu0.2
redis-tools on Ubuntu 18.04.6 LTS (bionic)

Vendor advisory

https://linux.oracle.com/errata/ELSA-2019-2002.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo