FEDORA-2023-8a9087f089 — security update for redis

stable

redis-7.0.14-1.fc37

FEDORA-2023-8a9087f089 created by remi 12 months ago for Fedora 37

Redis 7.0.14 Released Wed 18 Oct 2023 10:33:40 IDT

Upgrade urgency SECURITY: See security fixes below.

Security fixes

(CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-8a9087f089

This update has been submitted for testing by remi.

12 months ago

This update's test gating status has been changed to 'ignored'.

12 months ago

This update has been pushed to testing.

12 months ago

remi edited this update.

12 months ago

This update has been submitted for stable by bodhi.

12 months ago

This update has been pushed to stable.

12 months ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

redis-7.0.14-1.fc37

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

12 months ago

in testing

12 months ago

in stable

12 months ago

modified

12 months ago

approved

12 months ago

BZ#2244940 CVE-2023-45145 redis: possible bypass of Unix socket permissions on startup

BZ#2244942 CVE-2023-45145 redis: possible bypass of Unix socket permissions on startup [fedora-all]

redis-7.0.14-1.fc37

Automated Test Results

ignored