HomeFreeBSD

Security update if you use 32bit build of redis (see bellow), MODERATE

Description

Security update if you use 32bit build of redis (see bellow), MODERATE
if you used earlier versions of Redis 6.2, LOW otherwise.

Integer overflow on 32-bit systems (CVE-2021-21309):
Redis 4.0 or newer uses a configurable limit for the maximum supported bulk
input size. By default, it is 512MB which is a safe value for all platforms.
If the limit is significantly increased, receiving a large request from a client
may trigger several integer overflow scenarios, which would result with buffer
overflow and heap corruption.

ChangeLog: https://github.com/redis/redis/releases/tag/6.2.0

Details

Provenance
osaAuthored on
Parents
rP566401: Security update to the recent version 6.0.11 if you use 32bit build of redis.
Branches
Unknown
Tags
Unknown