Linux · Security advisory · February 18, 2022

DSA-5081-1: redis security update

DSA-5081-1, released February 18, 2022, fixes 1 CVE in redis (version 5:6.0.16-1+deb11u2). One of them is being exploited (CVE-2022-0543); 1 on CISA KEV. Patch Radar priority: Patch now. The product is no longer supported.

Patch now1 on CISA KEVUnsupported product

CVEs closed

1 rated Critical

Exploited

CVE-2022-0543

Exploitation more likely

Vendor assessment

Highest EPSS

0.9935

99th percentile

Fixed package versions

Product	Release	Fixed in
redis	Debian 11.6 (bullseye)	5:6.0.16-1+deb11u2

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Patch now	CVE-2022-0543	redis: redis - security update		10.0	0.9935	KEVExploited

Also fixes CVE-2022-0543

DEBIAN-CVE-2022-0543
redis on Debian 12.15 (bookworm), Debian 13.5 (trixie), Debian 14
redis 5:5.0.7-2ubuntu0.1
redis on Ubuntu 20.04 LTS (focal)
redis-sentinel 5:5.0.7-2ubuntu0.1
redis-sentinel on Ubuntu 20.04 LTS (focal)
redis-server 5:5.0.7-2ubuntu0.1
redis-server on Ubuntu 20.04 LTS (focal)
redis-tools 5:5.0.7-2ubuntu0.1
redis-tools on Ubuntu 20.04 LTS (focal)

Vendor advisory

https://security-tracker.debian.org/tracker/CVE-2022-0543

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo