diff options
author | Sergey A. Osokin <osa@FreeBSD.org> | 2021-02-23 13:59:42 +0000 |
---|---|---|
committer | Sergey A. Osokin <osa@FreeBSD.org> | 2021-02-23 13:59:42 +0000 |
commit | a77db6167dcd583afe60e770744483aa4c4ead41 (patch) | |
tree | c452831857ced4c6d527c4c548fe9fd8f5e27878 /databases/redis/files/extra-patch-src-Makefile.luajit | |
parent | Document integer overflow on 32-bit systems (CVE-2021-21309): (diff) |
Security update to the recent version 5.0.11 if you use 32bit build of redis.
Integer overflow on 32-bit systems (CVE-2021-21309):
Redis 4.0 or newer uses a configurable limit for the maximum supported bulk
input size. By default, it is 512MB which is a safe value for all platforms.
If the limit is significantly increased, receiving a large request from a client
may trigger several integer overflow scenarios, which would result with buffer
overflow and heap corruption.
Various bugfixes.
Notes
Notes:
svn path=/head/; revision=566399
Diffstat (limited to 'databases/redis/files/extra-patch-src-Makefile.luajit')
0 files changed, 0 insertions, 0 deletions