Low: redis:6 security, bug fix, and enhancement update

🗓️ 08 Nov 2022 00:00:00Reported by AlmaLinuxType

almalinux

almalinux🔗 errata.almalinux.org👁 117 Views

Low: Redis 6.2.7 security, bug fix, and enhancement updat

Reporter	Title	Published	Views	Family All 182
IBM Security Bulletins	Security Bulletin: IBM QRadar Advisor With Watson App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 May 202318:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Redis affect IBM Event Streams (CVE-2022-24736, CVE-2022-24735)	30 Sep 202213:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected but not considered vulnerable to multiple vulnerabilities	26 Mar 202504:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	29 Jan 202520:13	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Redis affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift (CVE-2022-24736, CVE-2022-24735)	13 Dec 202215:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by vulnerabilities in Redis	29 Jul 202220:03	–	ibm
Tenable Nessus	Amazon Linux 2022 : redis6, redis6-devel (ALAS2022-2022-115)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : redis6, redis6-devel (ALAS2022-2022-199)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : redis6, redis6-devel (ALAS2023-2023-064)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : redis (ALASREDIS6-2023-003)	27 Sep 202300:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
almalinux	8	noarch	redis-doc	6.2.7-1.module_el8.7.0+3288+a82c1b48	redis-doc-6.2.7-1.module_el8.7.0+3288+a82c1b48.noarch.rpm
almalinux	8	x86_64	redis-devel	6.2.7-1.module_el8.7.0+3288+a82c1b48	redis-devel-6.2.7-1.module_el8.7.0+3288+a82c1b48.x86_64.rpm
almalinux	8	x86_64	redis	6.2.7-1.module_el8.7.0+3288+a82c1b48	redis-6.2.7-1.module_el8.7.0+3288+a82c1b48.x86_64.rpm
almalinux	8	aarch64	redis	6.2.7-1.module_el8.7.0+3288+a82c1b48	redis-6.2.7-1.module_el8.7.0+3288+a82c1b48.aarch64.rpm
almalinux	8	aarch64	redis-devel	6.2.7-1.module_el8.7.0+3288+a82c1b48	redis-devel-6.2.7-1.module_el8.7.0+3288+a82c1b48.aarch64.rpm
almalinux	8	ppc64le	redis	6.2.7-1.module_el8.7.0+3288+a82c1b48	redis-6.2.7-1.module_el8.7.0+3288+a82c1b48.ppc64le.rpm
almalinux	8	ppc64le	redis-devel	6.2.7-1.module_el8.7.0+3288+a82c1b48	redis-devel-6.2.7-1.module_el8.7.0+3288+a82c1b48.ppc64le.rpm
almalinux	8	s390x	redis-devel	6.2.7-1.module_el8.7.0+3288+a82c1b48	redis-devel-6.2.7-1.module_el8.7.0+3288+a82c1b48.s390x.rpm
almalinux	8	s390x	redis	6.2.7-1.module_el8.7.0+3288+a82c1b48	redis-6.2.7-1.module_el8.7.0+3288+a82c1b48.s390x.rpm

Source	Link
access	www.access.redhat.com/errata/RHSA-2022:7541
access	www.access.redhat.com/security/cve/CVE-2022-24735
access	www.access.redhat.com/security/cve/CVE-2022-24736
bugzilla	www.bugzilla.redhat.com/2080286
bugzilla	www.bugzilla.redhat.com/2080289
errata	www.errata.almalinux.org/8/ALSA-2022-7541.html

12 Nov 2022 01:43Current

7.5High risk

Vulners AI Score7.5

CVSS 26.8

CVSS 3.13.9 - 7.8

EPSS0.02147

SSVC

redis key-value store performance security bug fix enhancement code injection lua script cve-2022-24735 cve-2022-24736 data-structure server in-memory data persistence almalinux.