Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Oracle Linux 8 ELSA-2021-3945: Critical Redis Denial of Service Fix

oracle
Calendar Grey October 21, 2021
Oracle Linux Logo Esm H88
The Oracle Linux Security Advisory ELSA-2021-3945 outlines crucial Redis updates essential for system security, urging organizations to act swiftly to address vulnerabilities.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[6.0.9-5] - fix denial of service via Redis Standard Protocol (RESP) request CVE-2021-32675 [6.0.9-4] - fix lua scripts can overflow the heap-based Lua stack CVE-2021-32626 - fix integer overflow issue with Streams CVE-2021-32627 - fix integer overflow bug in the ziplist data structure CVE-2021-32628 - fix integer overflow issue with intsets CVE-2021-32687 - fix integer overflow issue with strings CVE-2021-41099 [6.0.9-3] - fix integer overflow via STRALGO LCS command CVE-2021-29477

Topics%20covered

Topics Covered

security advisory denial of service security fix Oracle Linux redis update

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates/redis-6.0.9-5.module+el8.4.0+20384+68ad316c.src.rpm

x86_64

redis-6.0.9-5.module+el8.4.0+20384+68ad316c.x86_64.rpm redis-devel-6.0.9-5.module+el8.4.0+20384+68ad316c.x86_64.rpm redis-doc-6.0.9-5.module+el8.4.0+20384+68ad316c.noarch.rpm

aarch64

redis-6.0.9-5.module+el8.4.0+20384+68ad316c.aarch64.rpm redis-devel-6.0.9-5.module+el8.4.0+20384+68ad316c.aarch64.rpm redis-doc-6.0.9-5.module+el8.4.0+20384+68ad316c.noarch.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2021-32626 CVE-2021-32627 CVE-2021-32628 CVE-2021-32675 CVE-2021-32687 CVE-2021-41099

Topics%20covered

Topics Covered

security advisory denial of service security fix Oracle Linux redis update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here