http://bugzilla.opensuse.org/show_bug.cgi?id=1191302 Bug ID: 1191302 Summary: VUL-0: CVE-2021-32687: redis: Integer to heap buffer overflow with intsets, when set-max-intset-entries is manually configured to a non-default, very large value Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: danilo.spinella@suse.com Reporter: Andreas.Stieger@gmx.de QA Contact: security-team@suse.de Found By: Security Response Team Blocker: --- Fixed in Redis 6.2.6, 6.0.16 and 5.0.14 CVE-2021-32687: Integer to heap buffer overflow with intsets, when set-max-intset-entries is manually configured to a non-default, very large value References: https://github.com/redis/redis/commit/b1149a49b28efe62411146fa5c675983ba6d79... https://groups.google.com/g/redis-db/c/GS_9L2KCk9g/m/Q7ZN1R1cDAAJ -- You are receiving this mail because: You are on the CC list for the bug.