Lucene search

RedHatRHSA-2021:3946

HistoryOct 20, 2021 - 12:46 p.m.

(RHSA-2021:3946) Important: redis:5 security update

2021-10-2012:46:50

access.redhat.com

0.023 Low

EPSS

Percentile

89.8%

JSON

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.

Security Fix(es):

redis: Lua scripts can overflow the heap-based Lua stack (CVE-2021-32626)
redis: Integer overflow issue with Streams (CVE-2021-32627)
redis: Integer overflow bug in the ziplist data structure (CVE-2021-32628)
redis: Denial of service via Redis Standard Protocol (RESP) request (CVE-2021-32675)
redis: Integer overflow issue with intsets (CVE-2021-32687)
redis: Integer overflow issue with strings (CVE-2021-41099)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanys390xredis-debuginfo< 5.0.3-5.module+el8.1.0+12925+6460abefredis-debuginfo-5.0.3-5.module+el8.1.0+12925+6460abef.s390x.rpm
RedHatanyaarch64redis-debuginfo< 5.0.3-5.module+el8.1.0+12925+6460abefredis-debuginfo-5.0.3-5.module+el8.1.0+12925+6460abef.aarch64.rpm
RedHatanys390xredis< 5.0.3-5.module+el8.1.0+12925+6460abefredis-5.0.3-5.module+el8.1.0+12925+6460abef.s390x.rpm
RedHatanyx86_64redis-debugsource< 5.0.3-5.module+el8.1.0+12925+6460abefredis-debugsource-5.0.3-5.module+el8.1.0+12925+6460abef.x86_64.rpm
RedHatanyppc64leredis-debuginfo< 5.0.3-5.module+el8.1.0+12925+6460abefredis-debuginfo-5.0.3-5.module+el8.1.0+12925+6460abef.ppc64le.rpm
RedHatanyx86_64redis-debuginfo< 5.0.3-5.module+el8.1.0+12925+6460abefredis-debuginfo-5.0.3-5.module+el8.1.0+12925+6460abef.x86_64.rpm
RedHatanyaarch64redis-debugsource< 5.0.3-5.module+el8.1.0+12925+6460abefredis-debugsource-5.0.3-5.module+el8.1.0+12925+6460abef.aarch64.rpm
RedHatanyppc64leredis< 5.0.3-5.module+el8.1.0+12925+6460abefredis-5.0.3-5.module+el8.1.0+12925+6460abef.ppc64le.rpm
RedHatanyppc64leredis-debugsource< 5.0.3-5.module+el8.1.0+12925+6460abefredis-debugsource-5.0.3-5.module+el8.1.0+12925+6460abef.ppc64le.rpm
RedHatanys390xredis-devel< 5.0.3-5.module+el8.1.0+12925+6460abefredis-devel-5.0.3-5.module+el8.1.0+12925+6460abef.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	s390x	redis-debuginfo	< 5.0.3-5.module+el8.1.0+12925+6460abef	redis-debuginfo-5.0.3-5.module+el8.1.0+12925+6460abef.s390x.rpm
RedHat	any	aarch64	redis-debuginfo	< 5.0.3-5.module+el8.1.0+12925+6460abef	redis-debuginfo-5.0.3-5.module+el8.1.0+12925+6460abef.aarch64.rpm
RedHat	any	s390x	redis	< 5.0.3-5.module+el8.1.0+12925+6460abef	redis-5.0.3-5.module+el8.1.0+12925+6460abef.s390x.rpm
RedHat	any	x86_64	redis-debugsource	< 5.0.3-5.module+el8.1.0+12925+6460abef	redis-debugsource-5.0.3-5.module+el8.1.0+12925+6460abef.x86_64.rpm
RedHat	any	ppc64le	redis-debuginfo	< 5.0.3-5.module+el8.1.0+12925+6460abef	redis-debuginfo-5.0.3-5.module+el8.1.0+12925+6460abef.ppc64le.rpm
RedHat	any	x86_64	redis-debuginfo	< 5.0.3-5.module+el8.1.0+12925+6460abef	redis-debuginfo-5.0.3-5.module+el8.1.0+12925+6460abef.x86_64.rpm
RedHat	any	aarch64	redis-debugsource	< 5.0.3-5.module+el8.1.0+12925+6460abef	redis-debugsource-5.0.3-5.module+el8.1.0+12925+6460abef.aarch64.rpm
RedHat	any	ppc64le	redis	< 5.0.3-5.module+el8.1.0+12925+6460abef	redis-5.0.3-5.module+el8.1.0+12925+6460abef.ppc64le.rpm
RedHat	any	ppc64le	redis-debugsource	< 5.0.3-5.module+el8.1.0+12925+6460abef	redis-debugsource-5.0.3-5.module+el8.1.0+12925+6460abef.ppc64le.rpm
RedHat	any	s390x	redis-devel	< 5.0.3-5.module+el8.1.0+12925+6460abef	redis-devel-5.0.3-5.module+el8.1.0+12925+6460abef.s390x.rpm

Rows per page:

1-10 of 171

0.023 Low

EPSS

Percentile

89.8%

JSON

Related for RHSA-2021:3946