stable

redis-7.0.8-1.fc37

FEDORA-2023-fbfe7a6cfe created by remi a year ago for Fedora 37

Redis 7.0.8 Released Mon Jan 16 12:00:00 IDT 2023

Security Fixes:

  • (CVE-2022-35977) Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands can drive Redis to OOM panic
  • (CVE-2023-22458) Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands can lead to denial-of-service

Bug Fixes

  • Avoid possible hang when client issues long KEYS, SRANDMEMBER, HRANDFIELD, and ZRANDMEMBER commands and gets disconnected by client output buffer limit (#11676)
  • Make sure that fork child doesn't do incremental rehashing (#11692)
  • Fix a bug where blocking commands with a sub-second timeout would block forever (#11688)
  • Fix sentinel issue if replica changes IP (#11590)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-fbfe7a6cfe

This update has been submitted for testing by remi.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago

remi edited this update.

a year ago

This update has been pushed to testing.

a year ago

remi edited this update.

a year ago

remi edited this update.

a year ago
User Icon frantisekz commented & provided feedback a year ago
karma

Works well

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata
Type
security
Severity
medium
Karma
1
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
7 days
Dates
submitted
a year ago
in testing
a year ago
in stable
a year ago
modified
a year ago
approved
a year ago
BZ#2163132 CVE-2023-22458 redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands may lead to denial-of-service
0
0
BZ#2163133 CVE-2022-35977 redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic
0
0
BZ#2163174 CVE-2023-22458 redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands may lead to denial-of-service [fedora-37]
0
0
BZ#2163193 CVE-2022-35977 redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic [fedora-37]
0
0

Automated Test Results