Ubuntu alert USN-8120-1 (redis)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8120-1] Redis vulnerability
Date:
             
 
Tue, 24 Mar 2026 15:22:23 +0000
Message-ID:
             
 
<E1w53aJ-0000Q8-Jr@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8120-1
March 24, 2026

redis vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

Redis could be made to crash or run programs if it received specially
crafted network traffic.

Software Description:
- redis: Persistent key-value database with network interface

Details:

Seunghyun Lee discovered that Redis incorrectly handled memory during
hyperloglog operations. An attacker could use this issue to cause a denial
of service, or possibly achieve remote code execution.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  redis                           5:7.0.15-1ubuntu0.24.04.3
  redis-server                    5:7.0.15-1ubuntu0.24.04.3

After a standard system update you need to restart redis to make all the
necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8120-1
  CVE-2025-32023

Package Information:
  https://launchpad.net/ubuntu/+source/redis/5:7.0.15-1ubun...


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=ybkv
-----END PGP SIGNATURE-----