tocsin

Debian/redis: unknown

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated atta

Action: Upgrade redis to 5:7.0.15-1~deb12u10 or later.

Affected

introducedfixedlast affected
05:7.0.15-1~deb12u10-

Fixed versions

5:7.0.15-1~deb12u10

Sources

published · modified · JSON