Update of the Redis DBMS 7.0.15 and 7.2.4 addressing vulnerabilities.
The corrective releases of the Redis database management system 7.0.15 and 7.2.4 have addressed a critical vulnerability (CVE-2023-41056) that could potentially lead to remote code execution due to writing data beyond the allocated buffer. The issue manifests starting from Redis version 7.0.9 and is caused by incorrect buffer parameter calculations in the sdsResize function during a resize request. Source: opennet.ru
