< back to search

gpp_maybe Security update for redis

SUSE-SLE-Module-Server-Applications-15-SP4-2023-694

This update for redis fixes the following issues: - CVE-2022-36021: Fixed integer overflow in RANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands (bsc#1208790). - CVE-2023-25155: Fixed integer Overflow in RAND commands can lead to assertion (bsc#1208793). The following non-security bug was fixed: - Fixed redis-sentinel not starting due to the hardening in the systemd service (bsc#1208235).

Release Date

Mar 10 2023
References

Bugzilla: 1208793, 1208790, 1208235
CVEs: CVE-2023-25155, CVE-2022-36021
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Server Applications Module 15.4 aarch64

Packages

redis
Persistent key-value database

6.2.6-150400.3.16.1 lock rpm lock src

Server Applications Module 15.4 x86_64

Packages

redis
Persistent key-value database

6.2.6-150400.3.16.1 lock rpm lock src

Server Applications Module 15.4 s390x

Packages

redis
Persistent key-value database

6.2.6-150400.3.16.1 lock rpm lock src

Server Applications Module 15.4 ppc64le

Packages

redis
Persistent key-value database

6.2.6-150400.3.16.1 lock rpm lock src