SUSE-SU-2021:3772-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2021:3772-1

Related

Published

2021-11-23T14:48:08Z

Modified

2021-11-23T14:48:08Z

Summary

Security update for redis

Details

This update for redis fixes the following issues:

CVE-2021-32627: Fixed integer to heap buffer overflows with streams (bsc#1191305).
CVE-2021-32628: Fixed integer to heap buffer overflows handling ziplist-encoded data types (bsc#1191305).
CVE-2021-32687: Fixed integer to heap buffer overflow with intsets (bsc#1191302).
CVE-2021-32762: Fixed integer to heap buffer overflow issue in redis-cli and redis-sentinel (bsc#1191300).
CVE-2021-32626: Fixed heap buffer overflow caused by specially crafted Lua scripts (bsc#1191306).
CVE-2021-32672: Fixed random heap reading issue with Lua Debugger (bsc#1191304).
CVE-2021-32675: Fixed Denial Of Service when processing RESP request payloads with a large number of elements on many connections (bsc#1191303).
CVE-2021-41099: Fixed integer to heap buffer overflow handling certain string commands and network payloads (bsc#1191299).

References

Affected packages

Name: redis
Purl: pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0.14-6.8.1

{
    "binaries": [
        {
            "redis": "6.0.14-6.8.1"
        }
    ]
}

Name: redis
Purl: pkg:rpm/suse/redis&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP3

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.0.14-6.8.1

{
    "binaries": [
        {
            "redis": "6.0.14-6.8.1"
        }
    ]
}