ELSA-2019-2002

ELSA-2019-2002 - redis:5 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-08-19

Description

[5.0.3-2]
- fix Heap buffer overflow in HyperLogLog triggered by malicious client
CVE-2019-10192
- fix Stack buffer overflow in HyperLogLog triggered by malicious client
CVE-2019-10193

Related CVEs

CVE-2019-10193

CVE-2019-10192

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	redis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.src.rpm	f33c27ef717171bc2443c8666d402a7104537d274eb59ee67103a2af70697ba8	-	ol8_aarch64_appstream
	redis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.aarch64.rpm	fd29afae2948d984177dfc7dae84e413f5dc9ff1c021b626768492964f2051b3	-	ol8_aarch64_appstream
	redis-devel-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.aarch64.rpm	f3605f7383ff8305ba2369b7c21af39302d455c4f96a76ac63b4abe83ca95390	-	ol8_aarch64_appstream
	redis-doc-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.noarch.rpm	769d4a5751f077acf77bb15cf85a514e49e26663af344073b557e13f767ad212	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	redis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.src.rpm	f33c27ef717171bc2443c8666d402a7104537d274eb59ee67103a2af70697ba8	-	ol8_x86_64_appstream
	redis-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.x86_64.rpm	1054e5ea82b251f233c03cd584bfb3990267e07386201d815e27764e21e27f07	-	ol8_x86_64_appstream
	redis-devel-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.x86_64.rpm	c781e36bee2aacee4e6667d89d969fc156b9dd554b280ff532514bce2f7074a9	-	ol8_x86_64_appstream
	redis-doc-5.0.3-2.module+el8.0.0.z+5250+19ca22c8.noarch.rpm	769d4a5751f077acf77bb15cf85a514e49e26663af344073b557e13f767ad212	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team