ELSA-2021-3918

ELSA-2021-3918 - redis:5 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-10-19

Description

[5.0.3-5]
- fix denial of service via Redis Standard Protocol (RESP) request
CVE-2021-32675

[5.0.3-4]
- fix lua scripts can overflow the heap-based Lua stack
CVE-2021-32626
- fix integer overflow issue with Streams
CVE-2021-32627
- fix integer overflow bug in the ziplist data structure
CVE-2021-32628
- fix integer overflow issue with intsets
CVE-2021-32687
- fix integer overflow issue with strings
CVE-2021-41099

Related CVEs

CVE-2021-32628

CVE-2021-32687

CVE-2021-32627

CVE-2021-32675

CVE-2021-41099

CVE-2021-32626

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	redis-5.0.3-5.module+el8.4.0+20382+7694043a.src.rpm	8ca484eb1637e6b40c4679cd828187a5661fa989f93210786e50ffcc8e8a0a0f	-	ol8_aarch64_appstream
	redis-5.0.3-5.module+el8.4.0+20382+7694043a.src.rpm	8ca484eb1637e6b40c4679cd828187a5661fa989f93210786e50ffcc8e8a0a0f	-	ol8_aarch64_appstream_developer
	redis-5.0.3-5.module+el8.4.0+20382+7694043a.aarch64.rpm	d4c1c3c3543e0369337609aedaeed276ab880e69979df67942f37a4e45021429	-	ol8_aarch64_appstream
	redis-5.0.3-5.module+el8.4.0+20382+7694043a.aarch64.rpm	d4c1c3c3543e0369337609aedaeed276ab880e69979df67942f37a4e45021429	-	ol8_aarch64_appstream_developer
	redis-devel-5.0.3-5.module+el8.4.0+20382+7694043a.aarch64.rpm	081faddbca555e9c9d34098201aa0aabced70dcd56229df5d61c1ca8ad5636db	-	ol8_aarch64_appstream
	redis-devel-5.0.3-5.module+el8.4.0+20382+7694043a.aarch64.rpm	081faddbca555e9c9d34098201aa0aabced70dcd56229df5d61c1ca8ad5636db	-	ol8_aarch64_appstream_developer
	redis-doc-5.0.3-5.module+el8.4.0+20382+7694043a.noarch.rpm	898bcc044beb36cf9ee0dd833977990014066281d1177dd56f8d0ded68cc41ac	-	ol8_aarch64_appstream
	redis-doc-5.0.3-5.module+el8.4.0+20382+7694043a.noarch.rpm	898bcc044beb36cf9ee0dd833977990014066281d1177dd56f8d0ded68cc41ac	-	ol8_aarch64_appstream_developer
Oracle Linux 8 (x86_64)	redis-5.0.3-5.module+el8.4.0+20382+7694043a.src.rpm	8ca484eb1637e6b40c4679cd828187a5661fa989f93210786e50ffcc8e8a0a0f	-	ol8_x86_64_appstream
	redis-5.0.3-5.module+el8.4.0+20382+7694043a.src.rpm	8ca484eb1637e6b40c4679cd828187a5661fa989f93210786e50ffcc8e8a0a0f	-	ol8_x86_64_appstream_developer
	redis-5.0.3-5.module+el8.4.0+20382+7694043a.x86_64.rpm	55e980fc065cd6b484c29cd4c1252440933d2bc1b694025710d41f9c4ace4b9a	-	ol8_x86_64_appstream
	redis-5.0.3-5.module+el8.4.0+20382+7694043a.x86_64.rpm	55e980fc065cd6b484c29cd4c1252440933d2bc1b694025710d41f9c4ace4b9a	-	ol8_x86_64_appstream_developer
	redis-devel-5.0.3-5.module+el8.4.0+20382+7694043a.x86_64.rpm	ff356e9319f4c7dfffb4aa6320b37da9a53a31e264a2eec8c3ced9d1690eab43	-	ol8_x86_64_appstream
	redis-devel-5.0.3-5.module+el8.4.0+20382+7694043a.x86_64.rpm	ff356e9319f4c7dfffb4aa6320b37da9a53a31e264a2eec8c3ced9d1690eab43	-	ol8_x86_64_appstream_developer
	redis-doc-5.0.3-5.module+el8.4.0+20382+7694043a.noarch.rpm	898bcc044beb36cf9ee0dd833977990014066281d1177dd56f8d0ded68cc41ac	-	ol8_x86_64_appstream
	redis-doc-5.0.3-5.module+el8.4.0+20382+7694043a.noarch.rpm	898bcc044beb36cf9ee0dd833977990014066281d1177dd56f8d0ded68cc41ac	-	ol8_x86_64_appstream_developer

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team