Skip to content
OpenAdvisories
High ELSA-2021-2034 1 CVE

Important: redis:6 security update (Oracle Linux 8)

Published May 26, 2021 · Updated May 26, 2021

Ecosystem: Oracle Linux

Summary

[6.0.9-3]
- fix integer overflow via STRALGO LCS command
CVE-2021-29477

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 redis 0:6.0.9-3.module+el8.4.0+20175+330f1c60
Oracle Linux · 8 redis-devel 0:6.0.9-3.module+el8.4.0+20175+330f1c60
Oracle Linux · 8 redis-doc 0:6.0.9-3.module+el8.4.0+20175+330f1c60

Vulnerabilities 1

  • High 7.5
    CVE-2021-29477

    Vulnerability in the STRALGO LCS command

    Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer could be exploited using the `STRALGO LCS` command to corrupt the heap and potentially…

    Redis Redis redis redis Debian Alpine