FEDORA-2023-86068d1187 — security update for redis

stable

redis-7.0.10-1.fc37

FEDORA-2023-86068d1187 created by remi a year ago for Fedora 37

Redis 7.0.10 Released Mon Mar 20 16:00:00 IST 2023

Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:

(CVE-2023-28425) Specially crafted MSETNX command can lead to assertion and denial-of-service

Bug Fixes

Large blocks of replica client output buffer may lead to psync loops and unnecessary memory usage (#11666)
Fix CLIENT REPLY OFF|SKIP to not silence push notifications (#11875)
Trim excessive memory usage in stream nodes when exceeding stream-node-max-bytes (#11885)
Fix module RM_Call commands failing with OOM when maxmemory is changed to zero (#11319)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-86068d1187

This update has been submitted for testing by remi.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago

This update has been pushed to testing.

a year ago

remi edited this update.

a year ago

frantisekz commented & provided feedback a year ago

karma

Works well

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

redis-7.0.10-1.fc37

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

modified

a year ago

approved

a year ago

BZ#2180268 CVE-2023-28425 redis: Specially crafted MSETNX command can lead to denial-of-service

BZ#2180753 CVE-2023-28425 redis: Specially crafted MSETNX command can lead to denial-of-service [fedora-37]

redis-7.0.10-1.fc37

Automated Test Results

ignored