Ubuntu
redis package

CVE-2018-11218, CVE-2018-11219, CVE-2018-12326 forward-port for bionic

Bug #1805822 reported by Julian Andres Klode on 2018-11-29

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	redis (Ubuntu)	Invalid	Undecided	Unassigned
	Bionic	Fix Released	Undecided	Unassigned

Bug Description

This is a simple forward port of the relevant parts of the xenial update.

* CVE-2018-11218 needed no changes, applied as-is
* CVE-2018-11219 needed some whitespace changes
* CVE-2018-12326 needed some more changes, I picked the equivalent referenced upstream commit

The package was built in https://launchpad.net/~juliank/+archive/ubuntu/security/+packages against security, passed its test suite and I gave it a manual look on my server.

Revision history for this message

Julian Andres Klode (juliank) wrote on 2018-11-29:

redis_5_4.0.9-1_5_4.0.9-1ubuntu0.1.diff Edit (16.4 KiB, text/plain)

debdiff

Changed in redis (Ubuntu):
status:	New → Invalid
Changed in redis (Ubuntu Bionic):
status:	New → Confirmed
summary:	- CVE-2018-11218, CVE-2018-11219, CVE-2018-12326 + CVE-2018-11218, CVE-2018-11219, CVE-2018-12326 forward-port for bionic