Linux · Security advisory · November 10, 2020
ELSA-2020-4751: Security update for 11 packages
ELSA-2020-4751, released November 10, 2020, fixes 10 CVEs across 11 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
10
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8147
99th percentile
Priority of the 10 CVEs
Patch now 0
Urgent 0
High 3
Routine 7
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| httpd | ol 8 | 0:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| httpd-devel | ol 8 | 0:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| httpd-filesystem | ol 8 | 0:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| httpd-manual | ol 8 | 0:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| httpd-tools | ol 8 | 0:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| mod_http2 | ol 8 | 0:1.15.7-2.module+el8.3.0+7816+49791cfd |
| mod_ldap | ol 8 | 0:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| mod_md | ol 8 | 1:2.0.8-8.module+el8.3.0+7816+49791cfd |
| mod_proxy_html | ol 8 | 1:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| mod_session | ol 8 | 0:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
| mod_ssl | ol 8 | 1:2.4.37-30.0.1.module+el8.3.0+7816+49791cfd |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2019-10097 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 7.2 | 0.5287 | None reported | |
| High | CVE-2019-10082 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 9.1 | 0.1655 | None reported | |
| High | CVE-2019-10081 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 7.5 | 0.1456 | None reported | |
| Routine | CVE-2019-10092 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 6.1 | 0.8147 | None reported | |
| Routine | CVE-2019-10098 | libapache2-mod-proxy-uwsgi: In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured withmod_rewrite that were intended to be self-referential... | 6.1 | 0.7398 | None reported | |
| Routine | CVE-2020-1927 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 6.1 | 0.5669 | None reported | |
| Routine | CVE-2020-1934 | apache2-data: In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP se... | 5.3 | 0.5195 | None reported | |
| Routine | CVE-2018-17189 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 5.3 | 0.1940 | None reported | |
| Routine | CVE-2019-0196 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 5.3 | 0.1930 | None reported | |
| Routine | CVE-2019-0197 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following p... | 4.2 | 0.0829 | None reported |
Showing 1 to 10 of 10
1