OESA-2021-1394

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2021-1394

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2021-1394.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2021-1394

Upstream

CVE-2021-32672

Published

2021-10-15T11:03:17Z

Modified

2025-08-12T05:08:21.241152Z

Summary

redis security update

Details

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets.

Security Fix(es):

Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the debugger’s protocol parser to read data beyond the actual buffer. This issue affects all versions of Redis with Lua debugging support (3.2 or newer). The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14.(CVE-2021-32672)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / redis

Package

Name: redis
Purl: pkg:rpm/openEuler/redis&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.11-16.oe1

Ecosystem specific

{
    "aarch64": [
        "redis-4.0.11-16.oe1.aarch64.rpm",
        "redis-debuginfo-4.0.11-16.oe1.aarch64.rpm",
        "redis-debugsource-4.0.11-16.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "redis-debuginfo-4.0.11-16.oe1.x86_64.rpm",
        "redis-debugsource-4.0.11-16.oe1.x86_64.rpm",
        "redis-4.0.11-16.oe1.x86_64.rpm"
    ],
    "src": [
        "redis-4.0.11-16.oe1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP2 / redis

Package

Name: redis
Purl: pkg:rpm/openEuler/redis&distro=openEuler-20.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.0.11-16.oe1

Ecosystem specific

{
    "aarch64": [
        "redis-debuginfo-4.0.11-16.oe1.aarch64.rpm",
        "redis-debugsource-4.0.11-16.oe1.aarch64.rpm",
        "redis-4.0.11-16.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "redis-debuginfo-4.0.11-16.oe1.x86_64.rpm",
        "redis-4.0.11-16.oe1.x86_64.rpm",
        "redis-debugsource-4.0.11-16.oe1.x86_64.rpm"
    ],
    "src": [
        "redis-4.0.11-16.oe1.src.rpm"
    ]
}