{"id":"CVE-2023-41056","aliases":["ALPINE-CVE-2023-41056","BELL-CVE-2023-41056","BIT-keydb-2023-41056","BIT-redis-2023-41056","BIT-valkey-2023-41056","CLSA-2026-1775836571","CLSA-2026-1776078299","DEBIAN-CVE-2023-41056","DSA-5610-1","EUVD-2023-45579","GHSA-xr47-pcmx-fq2m","MGASA-2025-0211","RHEA-2024:1143","UBUNTU-CVE-2023-41056","openSUSE-SU-2024:13572-1"],"status":"published","title":"Redis vulnerable to integer overflow in certain payloads","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.02561,"percentile":0.85326,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190","CWE-762"],"published":"2024-01-10T05:59:50.178497Z","modified":"2026-11-03T06:32:59Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"redis","fixed_in":["7.0.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"redis","fixed_in":["7.0.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"redis","fixed_in":["7.0.15-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"redis","fixed_in":["7.2.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"redis","fixed_in":["7.2.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"redis","fixed_in":["7.2.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"redis","fixed_in":["7.2.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"redis","fixed_in":["7.2.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"redis","fixed_in":["7.2.4-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"redis","fixed_in":["7.0.15-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"redis","fixed_in":["7.2.4-r0"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"keydb","fixed_in":["7.0.15","7.2.4"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"redis","fixed_in":["7.0.15","7.2.4"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"valkey","fixed_in":["7.0.15","7.2.4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis","fixed_in":["6.2.20-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis-devel","fixed_in":["6.2.20-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis-doc","fixed_in":["6.2.20-1.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis","fixed_in":["6.2.21-1.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-devel","fixed_in":["6.2.21-1.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-doc","fixed_in":["6.2.21-1.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"redis","fixed_in":["5:7.0.15-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"redis","fixed_in":["5:7.0.15-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"redis","fixed_in":["5:7.0.15-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis","fixed_in":["0:7.0.12-2.module+el9.3.0+21263+4e58afe8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debuginfo","fixed_in":["0:7.0.12-2.module+el9.3.0+21263+4e58afe8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debugsource","fixed_in":["0:7.0.12-2.module+el9.3.0+21263+4e58afe8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-devel","fixed_in":["0:7.0.12-2.module+el9.3.0+21263+4e58afe8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-doc","fixed_in":["0:7.0.12-2.module+el9.3.0+21263+4e58afe8"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"redis","fixed_in":["7.2.4-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9"},{"fixed":"7.0.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9"},{"fixed":"7.0.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9"},{"fixed":"7.0.15-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9"},{"fixed":"7.2.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9"},{"fixed":"7.2.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9"},{"fixed":"7.2.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9"},{"fixed":"7.2.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9"},{"fixed":"7.2.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9"},{"fixed":"7.2.4-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9-r0"},{"fixed":"7.0.15-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9-r0"},{"fixed":"7.2.4-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"keydb","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.9"},{"fixed":"7.0.15"},{"introduced":"7.2.0"},{"fixed":"7.2.4"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"redis","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.9"},{"fixed":"7.0.15"},{"introduced":"7.2.0"},{"fixed":"7.2.4"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"valkey","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.9"},{"fixed":"7.0.15"},{"introduced":"7.2.0"},{"fixed":"7.2.4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.20-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.20-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.20-1.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.21-1.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.21-1.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.21-1.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1~deb12u1"}]}],"versions":["5:7.0.11-1","5:7.0.11-1+deb12u1","5:7.0.12-1","5:7.0.12-2","5:7.0.13-1","5:7.0.13-2","5:7.0.14-1","5:7.0.14-2"]},{"source":"osv","ecosystem":"Debian:13","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1~deb12u1"}]}],"versions":["5:7.0.11-1","5:7.0.11-1+deb12u1","5:7.0.12-1","5:7.0.12-2","5:7.0.13-1","5:7.0.13-2","5:7.0.14-1","5:7.0.14-2"],"bundled":5},{"source":"osv","ecosystem":"Mageia:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.10-1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.3.0+21263+4e58afe8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.3.0+21263+4e58afe8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.3.0+21263+4e58afe8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.3.0+21263+4e58afe8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.3.0+21263+4e58afe8"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.4-1.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redis","product":"redis"}],"references":[{"url":"https://github.com/redis/redis/security/advisories/GHSA-xr47-pcmx-fq2m","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://github.com/redis/redis/releases/tag/7.0.15","tags":["x_refsource_MISC","x_transferred","Release Notes","article","web"]},{"url":"https://github.com/redis/redis/releases/tag/7.2.4","tags":["x_refsource_MISC","x_transferred","Release Notes","article","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JTGQJ2YLYB24B72I5B5H32YIMPVSWIT/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JTWHPLC3RI67VNRDOIXLDVNC5YMYBMQN/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20240223-0003/","tags":["x_transferred","web","advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-41056","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-41056","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2024-4","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41056","tags":["web","advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1775836571.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1776078299.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/41xxx/CVE-2023-41056.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-41056","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0211.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34452","tags":["report"]},{"url":"https://github.com/redis/redis/releases/tag/7.2.10","tags":["web"]},{"url":"https://access.redhat.com/errata/RHEA-2024:1143","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhea-2024_1143.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41056","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2023-41056","tags":["report"]},{"url":"https://github.com/redis/redis/commit/e351099e1119fb89496be578f5232c61ce300224","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-41056","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-41056","title":"Redis vulnerable to integer overflow in certain payloads","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","status":"published","published":"2024-01-10T15:59:36.752Z","modified":"2025-06-17T14:42:05.153Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-762","CWE-190"],"updated_at":"2026-11-02T14:35:18.88314Z"}],"euvd":[{"id":"EUVD-2023-45579","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","status":"published","published":"2024-01-10T15:59:36Z","modified":"2025-06-17T14:42:05Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:22.732364Z"}],"nvd":[{"id":"CVE-2023-41056","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","status":"published","published":"2024-01-10T16:15:46.557Z","modified":"2026-06-17T06:20:20.327Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-190","CWE-762"],"updated_at":"2026-11-02T14:09:00.788714Z"}],"osv":[{"id":"ALPINE-CVE-2023-41056","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","status":"published","published":"2024-01-10T16:15:46.557Z","modified":"2026-11-03T06:32:59.358126856Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"BELL-CVE-2023-41056","status":"published","published":"2024-01-10T05:59:50.178497Z","modified":"2026-01-26T09:33:35.857983Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-41056","title":"Redis vulnerable to integer overflow in certain payloads","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","status":"published","published":"2024-01-10T15:59:36.752Z","modified":"2026-10-28T02:31:02.262257162Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190","CWE-762"],"updated_at":"2026-11-02T15:44:33.244128Z"},{"id":"DEBIAN-CVE-2023-41056","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","status":"published","published":"2024-01-10T16:15:46.557Z","modified":"2026-10-26T18:02:32.473294153Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.980321Z"},{"id":"RHEA-2024:1143","title":"Red Hat Enhancement Advisory: redis:7 update","status":"published","published":"2024-10-22T01:42:43Z","modified":"2026-08-05T10:16:49Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"UBUNTU-CVE-2023-41056","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","status":"withdrawn","published":"2024-01-10T16:15:00Z","modified":"2025-07-16T07:20:45.958263Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"BIT-keydb-2023-41056","title":"Redis vulnerable to integer overflow in certain payloads","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","status":"published","published":"2024-08-22T19:23:05.762Z","modified":"2026-09-08T08:48:07.115464228Z","updated_at":"2026-11-02T15:28:32.162822Z"},{"id":"BIT-redis-2023-41056","title":"Redis vulnerable to integer overflow in certain payloads","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","status":"published","published":"2024-03-06T11:03:35.383Z","modified":"2026-09-08T08:48:19.121509446Z","updated_at":"2026-11-02T15:28:35.111822Z"},{"id":"BIT-valkey-2023-41056","title":"Redis vulnerable to integer overflow in certain payloads","description":"Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4.","status":"published","published":"2024-08-22T19:40:41.35Z","modified":"2025-10-15T02:42:18.105356Z","updated_at":"2026-11-02T15:28:36.104787Z"},{"id":"CLSA-2026-1775836571","title":"redis: Fix of CVE-2023-41056","description":"- CVE-2023-41056: fix possible corruption in sdsResize","status":"published","published":"2026-04-10T15:56:16Z","modified":"2026-06-01T00:32:47.123739203Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1776078299","title":"redis: Fix of CVE-2023-41056","description":"- CVE-2023-41056: fix possible corruption in sdsResize due to incorrect\n  alloc_already_optimal logic skipping sds type header update","status":"published","published":"2026-04-13T11:05:04Z","modified":"2026-06-01T00:32:21.468977343Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"DSA-5610-1","title":"redis - security update","status":"published","published":"2024-01-29T00:00:00Z","modified":"2026-03-09T02:11:43.109577Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2025-0211","title":"Updated redis packages fix security vulnerabilities","description":"Updated redis packages to a more recent version to fix security\nvulnerabilities:\nSome vulnerabilities have been discovered and fixed.\nPlease note this update is from 7.0 to 7.2 which brings some potentially\nbreaking changes. In most cases this update could be installed without\nproblems.\nPotentially Breaking / Behavior Changes:\n* Client side tracking for scripts now tracks the keys that are read by\n  the script instead of the keys that are declared by the caller of EVAL /\n  FCALL (#11770)\n* Freeze time sampling during command execution and in scripts (#10300)\n* When a blocked command is being unblocked, checks like ACL, OOM, etc\n  are re-evaluated (#11012)\n* Unify ACL failure error message text and error codes (#11160)\n* Blocked stream command that's released when key no longer exists\n  carries a different error code (#11012)\n* Command stats are updated for blocked commands only when / if the\n  command actually executes (#11012)\n* The way ACL users are stored internally no longer removes redundant\n  command and category rules, which may alter the way those rules are\n  displayed as part of `ACL SAVE`, `ACL GETUSER` and `ACL LIST` (#11224)\n* Client connections created for TLS-based replication use SNI if\n  possible (#11458)\n* Stream consumers: Re-purpose seen-time, add active-time (#11099)\n* XREADGROUP and X[AUTO]CLAIM create the consumer regardless of whether\n  it was able to perform some reading/claiming (#11099)\n* ACL default newly created user set sanitize-payload flag in ACL\n  LIST/GETUSER #11279\n* Fix HELLO command not to affect the client state unless successful\n  (#11659)\n* Normalize `NAN` in replies to a single nan type, like we do with `inf`\n  (#11597)\n* Cluster SHARD IDs are no longer visible in the cluster nodes output,\n  introduced in 7.2-RC1. (#10536, #12166)\n* When calling PUBLISH with a RESP3 client that's also subscribed to the\n  same channel, the order is changed and the reply is sent before the\n  published message (#12326)\n","status":"published","published":"2025-07-19T17:55:11Z","modified":"2026-04-16T04:43:48.632653865Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2024:13572-1","title":"redis-7.2.4-1.1 on GA media","description":"These are all security issues fixed in the redis-7.2.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:28:29.120577Z","updated_at":"2026-11-02T16:58:36.327643Z"}]}}