SUSE-SU-2023:3407-1

Details

This update for redis fixes the following issues:

CVE-2023-28856: Fixed possible DoS when using HINCRBYFLOAT to create an hash field. (bsc#1210548)
CVE-2022-24834: Fixed a heap overflow in the cjson and cmsgpack libraries. (bsc#1213193)

Affected Packages

redis

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

Fixed in:

6.0.14-150200.6.26.1

References

REPORT

https://bugzilla.suse.com/1210548

REPORT

https://bugzilla.suse.com/1213193

WEB

https://www.suse.com/security/cve/CVE-2022-24834

WEB

https://www.suse.com/security/cve/CVE-2023-28856

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20233407-1/