(RHSA-2022:7541) Low: redis:6 security, bug fix, and enhancement update

2022-11-0806:22:23

access.redhat.com

redis

data structure

performance

security

update

cve-2022-24735

cve-2022-24736

red hat enterprise linux

0.002 Low

EPSS

Percentile

60.1%

JSON

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.

The following packages have been upgraded to a later upstream version: redis (6.2.7). (BZ#1999873)

Security Fix(es):

redis: Code injection via Lua script execution environment (CVE-2022-24735)
redis: Malformed Lua script can crash Redis (CVE-2022-24736)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.7 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64leredis-debugsource< 6.2.7-1.module+el8.7.0+15197+cc495aebredis-debugsource-6.2.7-1.module+el8.7.0+15197+cc495aeb.ppc64le.rpm
RedHatanyppc64leredis< 6.2.7-1.module+el8.7.0+15197+cc495aebredis-6.2.7-1.module+el8.7.0+15197+cc495aeb.ppc64le.rpm
RedHatanynoarchredis-doc< 6.2.7-1.module+el8.7.0+15197+cc495aebredis-doc-6.2.7-1.module+el8.7.0+15197+cc495aeb.noarch.rpm
RedHatanyaarch64redis-debuginfo< 6.2.7-1.module+el8.7.0+15197+cc495aebredis-debuginfo-6.2.7-1.module+el8.7.0+15197+cc495aeb.aarch64.rpm
RedHatanyx86_64redis-debugsource< 6.2.7-1.module+el8.7.0+15197+cc495aebredis-debugsource-6.2.7-1.module+el8.7.0+15197+cc495aeb.x86_64.rpm
RedHatanyppc64leredis-devel< 6.2.7-1.module+el8.7.0+15197+cc495aebredis-devel-6.2.7-1.module+el8.7.0+15197+cc495aeb.ppc64le.rpm
RedHatanys390xredis-debuginfo< 6.2.7-1.module+el8.7.0+15197+cc495aebredis-debuginfo-6.2.7-1.module+el8.7.0+15197+cc495aeb.s390x.rpm
RedHatanys390xredis-debugsource< 6.2.7-1.module+el8.7.0+15197+cc495aebredis-debugsource-6.2.7-1.module+el8.7.0+15197+cc495aeb.s390x.rpm
RedHatanyaarch64redis-debugsource< 6.2.7-1.module+el8.7.0+15197+cc495aebredis-debugsource-6.2.7-1.module+el8.7.0+15197+cc495aeb.aarch64.rpm
RedHatanyx86_64redis-devel< 6.2.7-1.module+el8.7.0+15197+cc495aebredis-devel-6.2.7-1.module+el8.7.0+15197+cc495aeb.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64le	redis-debugsource	< 6.2.7-1.module+el8.7.0+15197+cc495aeb	redis-debugsource-6.2.7-1.module+el8.7.0+15197+cc495aeb.ppc64le.rpm
RedHat	any	ppc64le	redis	< 6.2.7-1.module+el8.7.0+15197+cc495aeb	redis-6.2.7-1.module+el8.7.0+15197+cc495aeb.ppc64le.rpm
RedHat	any	noarch	redis-doc	< 6.2.7-1.module+el8.7.0+15197+cc495aeb	redis-doc-6.2.7-1.module+el8.7.0+15197+cc495aeb.noarch.rpm
RedHat	any	aarch64	redis-debuginfo	< 6.2.7-1.module+el8.7.0+15197+cc495aeb	redis-debuginfo-6.2.7-1.module+el8.7.0+15197+cc495aeb.aarch64.rpm
RedHat	any	x86_64	redis-debugsource	< 6.2.7-1.module+el8.7.0+15197+cc495aeb	redis-debugsource-6.2.7-1.module+el8.7.0+15197+cc495aeb.x86_64.rpm
RedHat	any	ppc64le	redis-devel	< 6.2.7-1.module+el8.7.0+15197+cc495aeb	redis-devel-6.2.7-1.module+el8.7.0+15197+cc495aeb.ppc64le.rpm
RedHat	any	s390x	redis-debuginfo	< 6.2.7-1.module+el8.7.0+15197+cc495aeb	redis-debuginfo-6.2.7-1.module+el8.7.0+15197+cc495aeb.s390x.rpm
RedHat	any	s390x	redis-debugsource	< 6.2.7-1.module+el8.7.0+15197+cc495aeb	redis-debugsource-6.2.7-1.module+el8.7.0+15197+cc495aeb.s390x.rpm
RedHat	any	aarch64	redis-debugsource	< 6.2.7-1.module+el8.7.0+15197+cc495aeb	redis-debugsource-6.2.7-1.module+el8.7.0+15197+cc495aeb.aarch64.rpm
RedHat	any	x86_64	redis-devel	< 6.2.7-1.module+el8.7.0+15197+cc495aeb	redis-devel-6.2.7-1.module+el8.7.0+15197+cc495aeb.x86_64.rpm