Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8: 2021-0562 Critical: Hiredis Integer Overflow Threat

mageia
Calendar Grey December 19, 2021
Dist Mageia Esm H88
Recent updates for the hiredis packages rectify a significant integer overflow issue present in Mageia 8 that impacts Redis interactions.
Updated hiredis packages fix security vulnerability: It was discovered that there was an integer-overflow vulnerability in hiredis, a C client library for communicating with Redis...

Summary

Updated hiredis packages fix security vulnerability:
It was discovered that there was an integer-overflow vulnerability in hiredis, a C client library for communicating with Redis databases. This occurred within the handling and parsing of 'multi-bulk' replies (CVE-2021-32765).

References

- https://bugs.mageia.org/show_bug.cgi?id=29549

- https://github.com/redis/hiredis/security/advisories/GHSA-hfm9-39pp-55p2

- https://lists.debian.org/debian-lts-announce/2021/10/msg00007.html

- https://www.cve.org/CVERecord?id=CVE-2021-32765

Topics%20covered

Topics Covered

security advisory update critical integer overflow Mageia Redis hiredis

Resolution

SRPMS

- 8/core/hiredis-0.13.3-6.1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 19 Dec 2021
URL: https://advisories.mageia.org/MGASA-2021-0562.html
Type: security
CVE: CVE-2021-32765

Topics%20covered

Topics Covered

security advisory update critical integer overflow Mageia Redis hiredis

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here