A redis security update has been released for Debian GNU/Linux 9 LTS to address a number of integer overflow issues.

DLA 2576-1: redis security update

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-2576-1 debian-lts@lists.debian.org
  https://www.debian.org/lts/security/ Chris Lamb
February 25, 2021   https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package : redis
Version : 3:3.2.6-3+deb9u4
CVE ID : CVE-2021-21309
Debian Bug : #983446

It was discovered that there were a number of integer overflow issues
in Redis, a persistent "NoSQL"-style key-value database. It is
currently believed that the issues only affect 32-bit based systems.

For Debian 9 "Stretch", this problem has been fixed in version
3:3.2.6-3+deb9u4.

We recommend that you upgrade your redis packages.

For the detailed security status of redis please refer to
its security tracker page at:
  https://security-tracker.debian.org/tracker/redis

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at:   https://wiki.debian.org/LTS