FEDORA-2023-68ae37fca3
Packages in this update:
redis-6.2.10-1.fc36
Update description:
Redis 6.2.10 Released Mon Jan 17 12:00:00 IST 2023
Upgrade urgency: MODERATE, a quick followup fix for a recently released 6.2.9.
Bug Fixes
Revert the change to KEYS in the recent client output buffer limit fix (#11676)
Redis 6.2.9 Released Mon Jan 16 12:00:00 IDT 2023
Upgrade urgency: SECURITY, contains fixes to security issues.
Security Fixes:
(CVE-2022-35977) Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands can drive Redis to OOM panic
(CVE-2023-22458) Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands can lead to denial-of-service
Bug Fixes
Avoid possible hang when client issues long KEYS, SRANDMEMBER, HRANDFIELD, and ZRANDMEMBER commands and gets disconnected by client output buffer limit (#11676)
Fix sentinel issue if replica changes IP (#11590)