OESA-2023-1289

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2023-1289
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2023-1289.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2023-1289
Upstream
Published
2023-05-19T11:05:16Z
Modified
2025-08-12T05:19:31.578941Z
Summary
redis security update
Details

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets.

Security Fix(es):

Redis is an open source, in-memory database that persists on disk. Authenticated users can use the HINCRBYFLOAT command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised to upgrade. There are no known workarounds for this issue.(CVE-2023-28856)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:20.03-LTS-SP1 / redis

Package

Name
redis
Purl
pkg:rpm/openEuler/redis&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0.11-18.oe1

Ecosystem specific 

{
    "src": [
        "redis-4.0.11-18.oe1.src.rpm"
    ],
    "x86_64": [
        "redis-debugsource-4.0.11-18.oe1.x86_64.rpm",
        "redis-debuginfo-4.0.11-18.oe1.x86_64.rpm",
        "redis-4.0.11-18.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "redis-debuginfo-4.0.11-18.oe1.aarch64.rpm",
        "redis-debugsource-4.0.11-18.oe1.aarch64.rpm",
        "redis-4.0.11-18.oe1.aarch64.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / redis

Package

Name
redis
Purl
pkg:rpm/openEuler/redis&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0.11-18.oe1

Ecosystem specific 

{
    "src": [
        "redis-4.0.11-18.oe1.src.rpm"
    ],
    "x86_64": [
        "redis-4.0.11-18.oe1.x86_64.rpm",
        "redis-debugsource-4.0.11-18.oe1.x86_64.rpm",
        "redis-debuginfo-4.0.11-18.oe1.x86_64.rpm"
    ],
    "aarch64": [
        "redis-debuginfo-4.0.11-18.oe1.aarch64.rpm",
        "redis-4.0.11-18.oe1.aarch64.rpm",
        "redis-debugsource-4.0.11-18.oe1.aarch64.rpm"
    ]
}

openEuler:22.03-LTS / redis

Package

Name
redis
Purl
pkg:rpm/openEuler/redis&distro=openEuler-22.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0.14-5.oe2203sp1

Ecosystem specific 

{
    "src": [
        "redis-4.0.14-5.oe2203.src.rpm",
        "redis-4.0.14-5.oe2203sp1.src.rpm"
    ],
    "x86_64": [
        "redis-debuginfo-4.0.14-5.oe2203.x86_64.rpm",
        "redis-4.0.14-5.oe2203.x86_64.rpm",
        "redis-debugsource-4.0.14-5.oe2203.x86_64.rpm",
        "redis-debugsource-4.0.14-5.oe2203sp1.x86_64.rpm",
        "redis-debuginfo-4.0.14-5.oe2203sp1.x86_64.rpm",
        "redis-4.0.14-5.oe2203sp1.x86_64.rpm"
    ],
    "aarch64": [
        "redis-debugsource-4.0.14-5.oe2203.aarch64.rpm",
        "redis-debuginfo-4.0.14-5.oe2203.aarch64.rpm",
        "redis-4.0.14-5.oe2203.aarch64.rpm",
        "redis-debuginfo-4.0.14-5.oe2203sp1.aarch64.rpm",
        "redis-4.0.14-5.oe2203sp1.aarch64.rpm",
        "redis-debugsource-4.0.14-5.oe2203sp1.aarch64.rpm"
    ]
}

openEuler:22.03-LTS-SP1 / redis

Package

Name
redis
Purl
pkg:rpm/openEuler/redis&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.0.14-5.oe2203sp1

Ecosystem specific 

{
    "src": [
        "redis-4.0.14-5.oe2203sp1.src.rpm"
    ],
    "x86_64": [
        "redis-debugsource-4.0.14-5.oe2203sp1.x86_64.rpm",
        "redis-debuginfo-4.0.14-5.oe2203sp1.x86_64.rpm",
        "redis-4.0.14-5.oe2203sp1.x86_64.rpm"
    ],
    "aarch64": [
        "redis-debuginfo-4.0.14-5.oe2203sp1.aarch64.rpm",
        "redis-4.0.14-5.oe2203sp1.aarch64.rpm",
        "redis-debugsource-4.0.14-5.oe2203sp1.aarch64.rpm"
    ]
}