File _patchinfo of Package patchinfo.8322

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.8322

<patchinfo incident="8322">
  <issue tracker="bnc" id="1097430">VUL-0: CVE-2018-11218 CVE-2018-11219: redis: 2 issues</issue>
  <issue tracker="bnc" id="1097768"></issue>
  <issue tracker="cve" id="2018-11219"/>
  <issue tracker="cve" id="2018-11218"/>
  <category>security</category>
  <rating>important</rating>
  <packager>darix</packager>
  <description>This update for redis to 4.0.10 fixes the following issues:

These security issues were fixed:

- CVE-2018-11218: Prevent heap corruption vulnerability in cmsgpack (bsc#1097430).
- CVE-2018-11219: Prevent integer overflow in Lua scripting (bsc#1097768).

For Leap 42.3 and openSUSE SLE 12 backports this is a jump from 4.0.6. For
additional details please see

- https://raw.githubusercontent.com/antirez/redis/4.0.9/00-RELEASENOTES
- https://raw.githubusercontent.com/antirez/redis/4.0.8/00-RELEASENOTES
- https://raw.githubusercontent.com/antirez/redis/4.0.7/00-RELEASENOTES
  </description>
  <summary>Security update for redis</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.8322

Places