• [SECURITY] [DSA 4480-1] redis security update

    From Moritz Muehlenhoff@1:229/2 to All on Thu Jul 11 23:10:02 2019
    From: [email protected]

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4480-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff
    July 11, 2019 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : redis
    CVE ID : CVE-2019-10192 CVE-2019-10193

    Multiple vulnerabilities were discovered in the HyperLogLog implementation
    of Redis, a persistent key-value database, which could result in denial
    of service or potentially the execution of arbitrary code.

    For the oldstable distribution (stretch), these problems have been fixed
    in version 3:3.2.6-3+deb9u3.

    For the stable distribution (buster), these problems have been fixed in
    version 5:5.0.3-4+deb10u1.

    We recommend that you upgrade your redis packages.

    For the detailed security status of redis please refer to
    its security tracker page at:
    https://security-tracker.debian.org/tracker/redis

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: [email protected]
    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAl0noEIACgkQEMKTtsN8 Tjb1uw/9FsbolfzHbh9/pjvfd2H2AWAMqenGUzI9y6Svy90Yki9tCMmwY2NSeVVK V29JXYuq2Is9YTUR33Qi6cjRXCSjv+T393/VRN779e+elaH9FLfiLjBmTf879dGV YNR6PrFysrCOLxJkuKm35XYPydXFJ65hsGSegtk1TcaUoKbGrH/n5lwJp8r7MvfW a1UklF2KHVOSfkt3SnF5NRK37nBpgCws9ACrxBgHDzeGORSHJoT3ubLRi7DZ0cu1 4HjOg7SeorW1ed/6I/BqcHnyL2hv+raim62gtoETaN8Vqd+0JS57tmRnmbr09czR HQl3QVjtA3woD0QHDDlo/4AlTJ9MJRp0dzd9XSlIf4Zl1RPtOP+lQtd+iuOIsIzY XqGVNK1lgfmHy2rWAFfgIm+4VHulggu0y40XWDb+1Me6Hmnw5CBJWlj1rzaFIGxG jCm0ZrwF6hYUbOMzD7ZRYIHjzhj2gPUe0JEiwQ64VWrwv9Nbm/0ochu49s1a96Wa WdOsBB5+xdPdDlIo5U/d/LgTDOO+pxv85iXs/ZSBbvTCQkHTyQsTG+tXjHfOeF6p EI8GaxaDm8FfL0kBbOYfK4aUSabPYetbZNIlbYdDDi7I2J5Y1hWMIrHHRDq3s9gY WubWC0ZJCCEzXpNiU6/XDGDnwWprkeRTkbudJeC5HaNY9nza3QQ=
    =3AfL
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)