< back to search

gpp_maybe Security update for redis

SUSE-SLE-Module-Server-Applications-15-SP4-2023-2122

This update for redis fixes the following issues: - CVE-2022-36021: Fixed possible integer overflow via specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands (bsc#1208790). - CVE-2023-28856: Fixed possible DoS when using HINCRBYFLOAT to create an hash field (bsc#1210548). - CVE-2023-25155: Fixed integer overflow in RAND commands that can lead to assertion (bsc#1208793).

Release Date

May 8 2023
References

Bugzilla: 1208790, 1210548, 1208793
CVEs: CVE-2022-36021, CVE-2023-28856, CVE-2023-25155
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.4 aarch64

Packages

redis
Persistent key-value database

6.2.6-150400.3.19.1 lock rpm lock src

Server Applications Module 15.4 ppc64le

Packages

redis
Persistent key-value database

6.2.6-150400.3.19.1 lock rpm lock src

Server Applications Module 15.4 s390x

Packages

redis
Persistent key-value database

6.2.6-150400.3.19.1 lock rpm lock src

Server Applications Module 15.4 x86_64

Packages

redis
Persistent key-value database

6.2.6-150400.3.19.1 lock rpm lock src