Lucene search

DebianDEBIAN:DLA-2576-1:05943

HistoryFeb 25, 2021 - 5:40 p.m.

[SECURITY] [DLA 2576-1] redis security update

2021-02-2517:40:40

lists.debian.org

redis

security update

debian 9

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

High

EPSS

0.006

Percentile

78.0%

JSON

Debian LTS Advisory DLA-2576-1 [email protected]
https://www.debian.org/lts/security/ Chris Lamb
February 25, 2021 https://wiki.debian.org/LTS

Package : redis
Version : 3:3.2.6-3+deb9u4
CVE ID : CVE-2021-21309
Debian Bug : #983446

It was discovered that there were a number of integer overflow issues
in Redis, a persistent "NoSQL"-style key-value database. It is
currently believed that the issues only affect 32-bit based systems.

For Debian 9 "Stretch", this problem has been fixed in version
3:3.2.6-3+deb9u4.

We recommend that you upgrade your redis packages.

For the detailed security status of redis please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/redis

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian10mipsredis-server< 5:5.0.3-4+deb10u3redis-server_5:5.0.3-4+deb10u3_mips.deb
Debian10arm64redis-tools< 5:5.0.3-4+deb10u3redis-tools_5:5.0.3-4+deb10u3_arm64.deb
Debian9arm64redis-server< 3:3.2.6-3+deb9u4redis-server_3:3.2.6-3+deb9u4_arm64.deb
Debian9arm64redis-sentinel< 3:3.2.6-3+deb9u4redis-sentinel_3:3.2.6-3+deb9u4_arm64.deb
Debian9armelredis-sentinel< 3:3.2.6-3+deb9u4redis-sentinel_3:3.2.6-3+deb9u4_armel.deb
Debian10mipselredis-server< 5:5.0.3-4+deb10u3redis-server_5:5.0.3-4+deb10u3_mipsel.deb
Debian9arm64redis-tools< 3:3.2.6-3+deb9u4redis-tools_3:3.2.6-3+deb9u4_arm64.deb
Debian10armelredis-sentinel< 5:5.0.3-4+deb10u3redis-sentinel_5:5.0.3-4+deb10u3_armel.deb
Debian10amd64redis-tools-dbgsym< 5:5.0.3-4+deb10u3redis-tools-dbgsym_5:5.0.3-4+deb10u3_amd64.deb
Debian10armelredis-tools-dbgsym< 5:5.0.3-4+deb10u3redis-tools-dbgsym_5:5.0.3-4+deb10u3_armel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	mips	redis-server	< 5:5.0.3-4+deb10u3	redis-server_5:5.0.3-4+deb10u3_mips.deb
Debian	10	arm64	redis-tools	< 5:5.0.3-4+deb10u3	redis-tools_5:5.0.3-4+deb10u3_arm64.deb
Debian	9	arm64	redis-server	< 3:3.2.6-3+deb9u4	redis-server_3:3.2.6-3+deb9u4_arm64.deb
Debian	9	arm64	redis-sentinel	< 3:3.2.6-3+deb9u4	redis-sentinel_3:3.2.6-3+deb9u4_arm64.deb
Debian	9	armel	redis-sentinel	< 3:3.2.6-3+deb9u4	redis-sentinel_3:3.2.6-3+deb9u4_armel.deb
Debian	10	mipsel	redis-server	< 5:5.0.3-4+deb10u3	redis-server_5:5.0.3-4+deb10u3_mipsel.deb
Debian	9	arm64	redis-tools	< 3:3.2.6-3+deb9u4	redis-tools_3:3.2.6-3+deb9u4_arm64.deb
Debian	10	armel	redis-sentinel	< 5:5.0.3-4+deb10u3	redis-sentinel_5:5.0.3-4+deb10u3_armel.deb
Debian	10	amd64	redis-tools-dbgsym	< 5:5.0.3-4+deb10u3	redis-tools-dbgsym_5:5.0.3-4+deb10u3_amd64.deb
Debian	10	armel	redis-tools-dbgsym	< 5:5.0.3-4+deb10u3	redis-tools-dbgsym_5:5.0.3-4+deb10u3_armel.deb