Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redis: CVE-2021-32761

Related Vulnerabilities: CVE-2021-32761  

Source

Debian Bug report logs - #991375
redis: CVE-2021-32761

version graph

Package: redis; Maintainer for redis is Chris Lamb <lamby@debian.org>; Source for redis is src:redis (PTS, buildd, popcon).

Reported by: "Chris Lamb" <lamby@debian.org>

Date: Wed, 21 Jul 2021 21:33:00 UTC

Severity: grave

Tags: security, upstream

Found in versions redis/5:5.0.3-4, redis/5:6.0.14-1, redis/5:5.0.3-4+deb10u2

Fixed in versions redis/5:6.2.5-1, redis/5:6.0.15-1

Done: Salvatore Bonaccorso <carnil@debian.org>

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, team@security.debian.org, Chris Lamb <lamby@debian.org>:
Bug#991375; Package redis. (Wed, 21 Jul 2021 21:33:02 GMT) (full text, mbox, link).

Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to team@security.debian.org, Chris Lamb <lamby@debian.org>. (Wed, 21 Jul 2021 21:33:02 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: submit@bugs.debian.org
Subject: redis: CVE-2021-32761
Date: Wed, 21 Jul 2021 22:23:37 +0100
Package: redis
Version: 5:5.0.3-4+deb10u2
X-Debbugs-CC: team@security.debian.org
Severity: grave
Tags: security

Hi,

The following vulnerability was published for redis.

CVE-2021-32761: Integer overflow issues with BITFIELD command on 32-bit systems

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2021-32761
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32761


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Added tag(s) upstream. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Thu, 22 Jul 2021 03:57:02 GMT) (full text, mbox, link).

Marked as found in versions redis/5:6.0.14-1. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Thu, 22 Jul 2021 03:57:03 GMT) (full text, mbox, link).

Marked as found in versions redis/5:5.0.3-4. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Thu, 22 Jul 2021 03:57:04 GMT) (full text, mbox, link).

Marked as fixed in versions redis/5:6.0.15-1. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Thu, 22 Jul 2021 04:27:04 GMT) (full text, mbox, link).

Marked Bug as done Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Thu, 22 Jul 2021 04:27:04 GMT) (full text, mbox, link).

Notification sent to "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer. (Thu, 22 Jul 2021 04:27:05 GMT) (full text, mbox, link).

Message sent on to "Chris Lamb" <lamby@debian.org>:
Bug#991375. (Thu, 22 Jul 2021 04:27:08 GMT) (full text, mbox, link).

Message #20 received at 991375-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: control@bugs.debian.org
Cc: 991375-submitter@bugs.debian.org
Subject: closing 991375
Date: Thu, 22 Jul 2021 06:23:50 +0200
close 991375 5:6.0.15-1
thanks

Marked as fixed in versions redis/5:6.2.5-1. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Thu, 22 Jul 2021 05:24:02 GMT) (full text, mbox, link).

Message sent on to "Chris Lamb" <lamby@debian.org>:
Bug#991375. (Thu, 22 Jul 2021 05:24:07 GMT) (full text, mbox, link).

Message #25 received at 991375-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: control@bugs.debian.org
Cc: 991375-submitter@bugs.debian.org
Subject: closing 991375
Date: Thu, 22 Jul 2021 07:21:16 +0200
close 991375 5:6.2.5-1
thanks

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Jul 22 16:16:53 2021; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook

Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started