File _patchinfo of Package patchinfo.27449
<patchinfo incident="27449">
<issue tracker="bnc" id="1207203">VUL-0: CVE-2023-22458: redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands can lead to denial-of-service</issue>
<issue tracker="bnc" id="1207448">SLES15SP4: redis update fails, build log throws errors</issue>
<issue tracker="bnc" id="1207202">VUL-0: CVE-2022-35977: redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands can drive Redis to OOM panic</issue>
<issue tracker="cve" id="2022-35977"/>
<issue tracker="cve" id="2023-22458"/>
<packager>pgajdos</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for redis</summary>
<description>This update for redis fixes the following issues:
- CVE-2022-35977: Fixed an integer overflow that could allow
authenticated users to cause a crash (bsc#1207202).
- CVE-2023-22458: Fixed a missing check that could allow authenticated
users to cause a crash (bsc#1207203).
</description>
</patchinfo>