gpp_maybe Security update for redis

SUSE-SLE-Module-Server-Applications-15-SP2-2021-3772

This update for redis fixes the following issues: - CVE-2021-32627: Fixed integer to heap buffer overflows with streams (bsc#1191305). - CVE-2021-32628: Fixed integer to heap buffer overflows handling ziplist-encoded data types (bsc#1191305). - CVE-2021-32687: Fixed integer to heap buffer overflow with intsets (bsc#1191302). - CVE-2021-32762: Fixed integer to heap buffer overflow issue in redis-cli and redis-sentinel (bsc#1191300). - CVE-2021-32626: Fixed heap buffer overflow caused by specially crafted Lua scripts (bsc#1191306). - CVE-2021-32672: Fixed random heap reading issue with Lua Debugger (bsc#1191304). - CVE-2021-32675: Fixed Denial Of Service when processing RESP request payloads with a large number of elements on many connections (bsc#1191303). - CVE-2021-41099: Fixed integer to heap buffer overflow handling certain string commands and network payloads (bsc#1191299).

• Release Date
  Nov 23 2021
• References
  Bugzilla: 1191299, 1191303, 1191304, 1191306, 1191305, 1191302, 1191300
  CVEs: CVE-2021-41099, CVE-2021-32687, CVE-2021-32628, CVE-2021-32626, CVE-2021-32672, CVE-2021-32762, CVE-2021-32627, CVE-2021-32675
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.2 aarch64

• Packages
  redis
  Persistent key-value database

  6.0.14-6.8.1 lock rpm lock src

Server Applications Module 15.2 ppc64le

• Packages
  redis
  Persistent key-value database

  6.0.14-6.8.1 lock rpm lock src

Server Applications Module 15.2 s390x

• Packages
  redis
  Persistent key-value database

  6.0.14-6.8.1 lock rpm lock src

Server Applications Module 15.2 x86_64

• Packages
  redis
  Persistent key-value database

  6.0.14-6.8.1 lock rpm lock src