Red Hat Security Advisory: redis:6 security update

CVE-2022-24834 — redis: heap overflow in the lua cjson and cmsgpack libraries CVE-2022-35977 — redis: Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands may result with false OOM panic CVE-2022-36021 — redis: Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow CVE-2023-22458 — redis: Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands may lead to denial-of-service CVE-2023-25155 — redis: String matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a denial-of-service attack CVE-2023-28856 — redis: Insufficient validation of HINCRBYFLOAT command CVE-2023-45145 — redis: possible bypass of Unix socket permissions on startup CVE-2024-31228 — redis: Denial-of-service due to unbounded pattern matching in Redis CVE-2024-31449 — redis: Lua library commands may lead to stack overflow and RCE in Redis CVE-2024-46981 — redis: Redis' Lua library commands may lead to remote code execution