浜戝畨鍏ㄦ棩鎶�210723锛氬紑婧怰edis鏁版嵁搴撳彂鐜拌繙绋嬩唬鐮佹墽琛屾紡娲�,闇€瑕佸敖蹇�崌绾�

Redis鏄�笘鐣岃寖鍥村唴搴旂敤骞挎硾鐨勫唴瀛樺瀷楂橀€熼敭鍊煎�鏁版嵁搴撱€浜戝�7鏈�22鏃�,Redis瀹樻柟鍙戝竷浜嗗畨鍏ㄦ洿鏂帮紝淇��浜哛edis 32畨鍏浣嶇増鏈�腑鍙戠幇鐨勮繙绋嬩唬鐮佹墽琛岄珮鍗辨紡娲炪€備互涓嬫槸婕忔礊璇︽儏锛�

婕ㄦ棩忔礊璇︽儏

鏉ユ簮锛歨ttps://github.com/redis/redis/secur鎶�ity/advisories/GHSA-8wxq-j7rp-g8wj?spm=a2c4g21.11174386.n2.3.3fa64c07M8B7B6

CVE-2021-3270761 CVSS璇勫垎锛�7.5 涓ラ噸绋嬪害锛氶珮

鍦�32浣峈edis鐗堟湰涓婏紝R23edis BITFIELD 鍛戒护瀹规槗鍙楀埌鏁存暟婧㈠嚭鐨勫奖鍝嶏紝鍙�兘琚�埄鐢ㄦ潵鐮村锛氬潖鍫嗐€佹硠婕忎换鎰忓爢鍐呭�鎴栬Е鍙戣繙绋嬩唬鐮佹墽琛屻€傝�婕忔礊娑夊強鏋勫缓紑婧鐗瑰埗鐨勪綅鍛戒护锛屾孩鍑轰綅鍋忕Щ閲忋€�

鍙楀奖鍝嶄骇鍝佸拰鐗堟湰

璇ユ紡娲炰粎褰卞搷怰e32浣嶇増鏈�殑Redis 2.2鎴栨洿楂樼増鏈�

瑙ｅ喅鏂规�

Redis瀹樻柟宸插彂di甯冨畨鍏ㄦ洿鏂帮紝浠ヤ笅鏄疪edis瀹夊叏鐗堟湰:

Redis 5.0.13

Rediss鏁 6.0.15

Redis 6.2.5

鏌ョ湅鏇村�婕忔礊淇℃伅 浠ュ強鍗囩骇璇疯�闂�畼缃戯版嵁細

https://github.com/redis/redis/security搴撳/advisories