Linux · Security advisory · May 22, 2019

RHSA-2019:1259: Security update for 6 packages

RHSA-2019:1259, released May 22, 2019, fixes 4 CVEs across 6 products. None of them is reported as exploited. Patch Radar priority: High.

High1 publicly disclosed

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0572

93rd percentile

Priority of the 4 CVEs

Patch now 0
                                Urgent 0
                                High 4
                                Routine 0

Fixed package versions

Product	Release	Fixed in
dotnet	RHEL 8	0:2.1.507-2.el8_0
dotnet-host	RHEL 8	0:2.1.11-2.el8_0
dotnet-host-fxr-2.1	RHEL 8	0:2.1.11-2.el8_0
dotnet-runtime-2.1	RHEL 8	0:2.1.11-2.el8_0
dotnet-sdk-2.1	RHEL 8	0:2.1.507-2.el8_0
dotnet-sdk-2.1.5xx	RHEL 8	0:2.1.507-2.el8_0

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2019-0820	.NET Framework and .NET Core Denial of Service Vulnerability	7.5	0.0572	Exploitation Less Likely
High	CVE-2019-0980	.Net Framework and .Net Core Denial of Service Vulnerability	7.5	0.0498	Exploitation Less Likely
High	CVE-2019-0981	.Net Framework and .Net Core Denial of Service Vulnerability	7.5	0.0498	Exploitation Less Likely
High	CVE-2019-0757	NuGet Package Manager Tampering Vulnerability	7.8	0.0270	DisclosedExploitation Less Likely

Also fixes CVE-2019-0820

KB4499167
Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems, Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems and 15 more
KB4494440
Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems, Internet Explorer 11 on Windows Server 2016 and 15 more
KB4499179
Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems, Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems and 12 more
KB4499181
Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems, Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems and 7 more
KB4499154
Internet Explorer 11 on Windows 10 for 32-bit Systems, Internet Explorer 11 on Windows 10 for x64-based Systems, Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems and 7 more
ELSA-2019-1259
dotnet, dotnet-host, dotnet-host-fxr-2.1 and 3 more on ol 8
KB4495610
Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems, Microsoft .NET Framework 4.8 on Windows Server 2016 and 1 more
KB4495611
Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for 32-bit Systems, Microsoft .NET Framework 4.8 on Windows 10 Version 1703 for x64-based Systems

Vendor advisory

https://access.redhat.com/errata/RHSA-2019:1259

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo