advisories/16095.adv

type: security
subject: Updated redis package fixes security vulnerability
CVE:
 - CVE-2015-4335
src:
  4:
   core:
     - redis-2.6.5-4.1.mga4
description: |
  It was discovered that redis, a persistent key-value database, could execute
  insecure Lua bytecode by way of the EVAL command. This could allow remote
  attackers to break out of the Lua sandbox and execute arbitrary code
  (CVE-2015-4335).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=16095
 - https://www.debian.org/security/2015/dsa-3279
ID: MGASA-2015-0244
1	type: security
2	subject: Updated redis package fixes security vulnerability
3	CVE:
4	- CVE-2015-4335
5	src:
6	4:
7	core:
8	- redis-2.6.5-4.1.mga4
9	description: \|
10	It was discovered that redis, a persistent key-value database, could execute
11	insecure Lua bytecode by way of the EVAL command. This could allow remote
12	attackers to break out of the Lua sandbox and execute arbitrary code
13	(CVE-2015-4335).
14	references:
15	- https://bugs.mageia.org/show_bug.cgi?id=16095
16	- https://www.debian.org/security/2015/dsa-3279
17	ID: MGASA-2015-0244