Upgrade openssl-src to version 1.1.1j or higher.

redis vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the redis package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Use After Free	<0:6.2.7-1.el9_4.1
H Use After Free	<0:6.2.7-1.el9_4.1
H Use After Free	<0:6.2.17-1.el9_5
H Stack-based Buffer Overflow	<0:6.2.17-1.el9_5
H Uncontrolled Recursion	<0:6.2.17-1.el9_5
H Improper Privilege Management	<0:6.2.17-1.el9_5
H Integer Overflow to Buffer Overflow	<0:6.2.17-1.el9_5
H Use After Free	<0:6.2.7-1.el9_4.1
H Use After Free	<0:6.2.7-1.el9_2.1
H Use After Free	<0:6.2.7-1.el9_2.1
H Use After Free	<0:6.2.7-1.el9_2.1
H Use After Free	<0:6.2.6-1.el9_0.1
H Use After Free	<0:6.2.17-1.el9_5
M Improper Input Validation	*
H Uncontrolled Recursion	<0:6.2.17-1.el9_5
H Stack-based Buffer Overflow	<0:6.2.17-1.el9_5
L NULL Pointer Dereference	<0:6.2.7-1.el9
L Arbitrary Code Injection	<0:6.2.7-1.el9
H Improper Privilege Management	<0:6.2.17-1.el9_5
L Improper Privilege Management	*
H Integer Overflow to Buffer Overflow	<0:6.2.17-1.el9_5
M Resource Exhaustion	*
M Improper Input Validation	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
M Integer Overflow or Wraparound	*
L Improper Resource Shutdown or Release	*
L Arbitrary Code Injection	<0:6.2.7-1.el9
L Arbitrary Code Injection	<0:6.2.7-1.el9
L Arbitrary Code Injection	<0:6.2.7-1.el9
L Arbitrary Code Injection	<0:6.2.7-1.el9
L NULL Pointer Dereference	<0:6.2.7-1.el9
L NULL Pointer Dereference	<0:6.2.7-1.el9
L NULL Pointer Dereference	<0:6.2.7-1.el9
L NULL Pointer Dereference	<0:6.2.7-1.el9