portage-ng / portage / dev-db / redis / 8.2.2
portage-ng glsa
8 advisories reference dev-db/redis · none place version 8.2.2 in a vulnerable range
▸ GLSA 202511-05 redict, redis: Multiple Vulnerabilities this version unaffected high local and remote 2025-11-24

Multiple vulnerabilities have been discovered in redis and redict, the worst of which could lead to execution of arbitrary code.

Announced
2025-11-24
Revised
2025-11-24
Access
local and remote
Bugs
#940609 #947749 #954265 #959657
Advisory
https://security.gentoo.org/glsa/202511-05

Affected packages

PackageArchVulnerableUnaffected
dev-db/redict*< 7.3.5>= 7.3.5
dev-db/redis*< 8.0.3>= 8.0.3

Background

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.

Description

Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Redis users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-8.0.3"

All Redict users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redict-7.3.5"

References

▸ GLSA 202408-05 Redis: Multiple Vulnerabilities this version unaffected normal local and remote 2024-08-07

Multiple vulnerabilities have been discovered in Redis, the worst of which may lead to a denial of service or possible remote code execution.

Announced
2024-08-07
Revised
2024-08-07
Access
local and remote
Bugs
#891169 #898464 #902501 #904486 #910191 #913741 #915989 #921662
Advisory
https://security.gentoo.org/glsa/202408-05

Affected packages

PackageArchVulnerableUnaffected
dev-db/redis*< 7.2.4>= 7.2.4

Background

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.

Description

Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Redis users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-7.2.4"

References

▸ GLSA 202209-17 Redis: Multiple Vulnerabilities this version unaffected high remote 2022-09-29

Multiple vulnerabilities have been found in Redis, the worst of which could result in arbitrary code execution.

Announced
2022-09-29
Revised
2022-09-29
Access
remote
Bugs
#803302 #816282 #841404 #856040 #859181 #872278
Advisory
https://security.gentoo.org/glsa/202209-17

Affected packages

PackageArchVulnerableUnaffected
dev-db/redis*< 7.0.5>= 7.0.5

Background

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.

Description

Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Redis users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-7.0.5"

References

▸ GLSA 202107-20 Redis: Multiple vulnerabilities this version unaffected normal remote 2021-07-09

Multiple vulnerabilities have been found in Redis, the worst of which could result in the arbitrary execution of code.

Announced
2021-07-09
Revised
2021-07-09
Access
remote
Bugs
#788211
Advisory
https://security.gentoo.org/glsa/202107-20

Affected packages

PackageArchVulnerableUnaffected
dev-db/redis*< 6.0.13>= 6.0.13, >= 6.2.3

Background

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.

Description

Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Redis 6.0.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-6.0.13"

All Redis 6.2.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-6.2.3"

References

▸ GLSA 202103-02 Redis: Remote code execution this version unaffected normal local, remote 2021-03-31

A vulnerability in Redis could lead to remote code execution.

Announced
2021-03-31
Revised
2021-03-31
Access
local, remote
Bugs
#773328
Advisory
https://security.gentoo.org/glsa/202103-02

Affected packages

PackageArchVulnerableUnaffected
dev-db/redis*< 6.0.12>= 5.0.12, >= 6.0.12

Background

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.

Description

It was discovered that there were a number of integer overflow issues in Redis.

Impact

A remote attacker, able to connect to a Redis instance, could send a malicious crafted large request possibly resulting in the execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Redis 5.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-5.0.12"

All Redis 6.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-6.0.12"

References

▸ GLSA 202008-17 Redis: Multiple vulnerabilities this version unaffected normal remote 2020-08-27

Multiple vulnerabilities have been found in Redis, the worst of which could result in the arbitrary execution of code.

Announced
2020-08-27
Revised
2020-08-27
Access
remote
Bugs
#633824 #724776
Advisory
https://security.gentoo.org/glsa/202008-17

Affected packages

PackageArchVulnerableUnaffected
dev-db/redis*< 5.0.9>= 5.0.9

Background

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.

Description

Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Redis users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-5.0.9"

References

▸ GLSA 201908-04 Redis: Multiple vulnerabilities this version unaffected normal remote 2019-08-09

Multiple vulnerabilities have been found in Redis, the worst of which may allow execution of arbitrary code.

Announced
2019-08-09
Revised
2019-08-09
Access
remote
Bugs
#658066 #689700
Advisory
https://security.gentoo.org/glsa/201908-04

Affected packages

PackageArchVulnerableUnaffected
dev-db/redis*< 4.0.14>= 4.0.14

Background

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.

Description

Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Redis users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-4.0.14"

References

▸ GLSA 201702-16 Redis: Multiple vulnerabilities this version unaffected normal remote 2017-02-20

Multiple vulnerabilities have been found in Redis, the worst of which may allow execution of arbitrary code.

Announced
2017-02-20
Revised
2017-02-20
Access
remote
Bugs
#551274 #565188 #595730
Advisory
https://security.gentoo.org/glsa/201702-16

Affected packages

PackageArchVulnerableUnaffected
dev-db/redis*< 3.2.5>= 3.2.5, >= 3.0.7

Background

Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache and message broker.

Description

Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker, able to connect to a Redis instance, could issue malicious commands possibly resulting in the execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Redis 3.0.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-3.0.7"

All Redis 3.2.x users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-db/redis-3.2.5"

References