==========================================================================
Ubuntu Security Notice USN-4061-1
July 16, 2019
redis vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 19.04
– Ubuntu 18.04 LTS
– Ubuntu 16.04 LTS
Summary:
Several security issues were fixed in Redis.
Software Description:
– redis: Persistent key-value database with network interface
Details:
It was discovered that Redis incorrectly handled the hyperloglog data structure.
An attacker could use this issue to cause Redis to crash, resulting in a denial
of service, or possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 19.04:
redis 5:5.0.3-4ubuntu0.1
redis-tools 5:5.0.3-4ubuntu0.1
Ubuntu 18.04 LTS:
redis 5:4.0.9-1ubuntu0.2
redis-tools 5:4.0.9-1ubuntu0.2
Ubuntu 16.04 LTS:
redis-tools 2:3.0.6-1ubuntu0.4
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4061-1
CVE-2019-10192, CVE-2019-10193
Package Information:
https://launchpad.net/ubuntu/+source/redis/5:5.0.3-4ubuntu0.1
https://launchpad.net/ubuntu/+source/redis/5:4.0.9-1ubuntu0.2
https://launchpad.net/ubuntu/+source/redis/2:3.0.6-1ubuntu0.4
—–BEGIN PGP SIGNATURE—–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=ONZH
—–END PGP SIGNATURE—–
—
