Summary
[7.2.6-1]
- rebase to 7.2.6 RHEL-26628
[7.0.12-1]
- rebase to 7.0.12 #2221899
[7.0.11-1]
- rebase to 7.0.11 for new redis:7 stream #2129826
[7.0.11-1]
- Upstream 7.0.11 release.
[7.0.10-2]
- fix modules directory ownership and permissions #2176173
- drop redis-shutdown helper and rely on systemd #2181181
[7.0.10-1]
- Upstream 7.0.10 release.
[7.0.9-1]
- Upstream 7.0.9 release.
[7.0.8-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
[7.0.8-1]
- Upstream 7.0.8 release.
[7.0.7-2]
- Upstream 7.0.7 release.
- refresh documentation
[7.0.6-1]
- Upstream 7.0.6 release.
[7.0.5-2]
- Port makefile to C99 mode
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | redis | 0:7.2.6-1.module+el9.5.0+90455+91264f59 |
| Oracle Linux · 9 | redis-devel | 0:7.2.6-1.module+el9.5.0+90455+91264f59 |
| Oracle Linux · 9 | redis-doc | 0:7.2.6-1.module+el9.5.0+90455+91264f59 |
Vulnerabilities 5
-
High 7.0CVE-2024-31449 Public exploit
Lua library commands may lead to stack overflow and RCE in Redis
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in a…
-
Medium 5.5
Denial-of-service due to unbounded pattern matching in Redis
Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND…
-
Medium 4.4
Denial-of-service due to malformed ACL selectors in Redis
Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem exists in Redis 7 pr…
-
Low 3.6
Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.
Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during…
-
Low 3.3
Redis SORT_RO may bypass ACL configuration
Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem e…