Linux · Security advisory · May 7, 2019
RHSA-2019:0980: Security update for 11 packages
RHSA-2019:0980, released May 7, 2019, fixes 2 CVEs across 11 products. One of them is being exploited (CVE-2019-0211); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
2
None rated Critical
Exploited
1
CVE-2019-0211
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.6501
99th percentile
Priority of the 2 CVEs
Patch now 1
Urgent 0
High 1
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| httpd | RHEL 8 | 0:2.4.37-11.module+el8.0.0+2969+90015743 |
| httpd-devel | RHEL 8 | 0:2.4.37-11.module+el8.0.0+2969+90015743 |
| httpd-filesystem | RHEL 8 | 0:2.4.37-11.module+el8.0.0+2969+90015743 |
| httpd-manual | RHEL 8 | 0:2.4.37-11.module+el8.0.0+2969+90015743 |
| httpd-tools | RHEL 8 | 0:2.4.37-11.module+el8.0.0+2969+90015743 |
| mod_http2 | RHEL 8 | 0:1.11.3-2.module+el8.0.0+2969+90015743 |
| mod_ldap | RHEL 8 | 0:2.4.37-11.module+el8.0.0+2969+90015743 |
| mod_md | RHEL 8 | 0:2.4.37-11.module+el8.0.0+2969+90015743 |
| mod_proxy_html | RHEL 8 | 1:2.4.37-11.module+el8.0.0+2969+90015743 |
| mod_session | RHEL 8 | 0:2.4.37-11.module+el8.0.0+2969+90015743 |
| mod_ssl | RHEL 8 | 1:2.4.37-11.module+el8.0.0+2969+90015743 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| Patch now | CVE-2019-0211 | apache2: In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privil... | 8.8 | 0.6501 | KEVExploited | |
| High | CVE-2019-0215 | httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es... | 7.5 | 0.1037 | None reported |
Showing 1 to 2 of 2
1