--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2018-a83d5ad82b
2018-08-04 19:27:50.149359
--------------------------------------------------------------------------------
Name : redis
Product : Fedora EPEL 6
Version : 3.2.12
Release : 1.el6
URL :
http://redis.io
Summary : A persistent key-value database
Description :
Redis is an advanced key-value store. It is often referred to as a data
structure server since keys can contain strings, hashes, lists, sets and
sorted sets.
You can run atomic operations on these types, like appending to a string;
incrementing the value in a hash; pushing to a list; computing set
intersection, union and difference; or getting the member with highest
ranking in a sorted set.
In order to achieve its outstanding performance, Redis works with an
in-memory dataset. Depending on your use case, you can persist it either
by dumping the dataset to disk every once in a while, or by appending
each command to a log.
Redis also supports trivial-to-setup master-slave replication, with very
fast non-blocking first synchronization, auto-reconnection on net split
and so forth.
Other features include Transactions, Pub/Sub, Lua scripting, Keys with a
limited time-to-live, and configuration settings to make Redis behave like
a cache.
You can use Redis from most programming languages also.
--------------------------------------------------------------------------------
Update Information:
Upstream 3.2.12 security fix release.
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1594294 - CVE-2018-12326 redis: code execution via a crafted command line
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1594294
[ 2 ] Bug #1592931 - /var/run/redis directory not created by RPM
(redis-3.2.11-1.el6.x86_64.rpm)
https://bugzilla.redhat.com/show_bug.cgi?id=1592931
[ 3 ] Bug #1591538 - CVE-2018-11219 redis: Integer overflow in lua_struct.c:b_unpack()
[epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591538
[ 4 ] Bug #1591537 - CVE-2018-11218 redis: Heap corruption in lua_cmsgpack.c [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1591537
[ 5 ] Bug #1499153 - CVE-2017-15047 redis: Insufficient input validation in the
clusterLoadConfig function [epel-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1499153
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update redis' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/...
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------