tocsin

Debian/redis: unknown

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated atta

Action: Upgrade redis to 5:8.0.2-3+deb13u3 or later.

Affected

introducedfixedlast affected
05:8.0.2-3+deb13u3-

Fixed versions

5:8.0.2-3+deb13u3

Sources

published · modified · JSON