FEDORA-2024-694899d442 — security update for redis

stable

redis-7.0.15-1.fc38

FEDORA-2024-694899d442 created by remi 2 years ago for Fedora 38

Redis 7.0.15 Released Tue 09 Jan 2024 10:45:52 IST

Upgrade urgency SECURITY: See security fixes below.

Security fixes

(CVE-2023-41056) In some cases, Redis may incorrectly handle resizing of memory buffers which can result in incorrect accounting of buffer sizes and lead to heap overflow and potential remote code execution.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2024-694899d442

This update has been submitted for testing by remi.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update has been pushed to testing.

2 years ago

remi edited this update.

2 years ago

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

approved

2 years ago

Builds

redis-7.0.15-1.fc38

BZ#2257454 CVE-2023-41056 redis: Heap Buffer Overflow may lead to potential remote code execution

BZ#2257455 TRIAGE CVE-2023-41056 redis: Heap Buffer Overflow may lead to potential remote code execution [fedora-all]

redis-7.0.15-1.fc38

Automated Test Results

ignored