Skip to content
OpenAdvisories
Medium ALAS2023-2025-1195 1 CVE

Moderate: redis6 security update (Amazon Linux 2023)

Published Sep 17, 2025 · Updated Sep 29, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-9810: TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.

Fixed packages 5

ReleasePackageFixed in
Amazon Linux · 2023 redis6 0:6.2.14-2.amzn2023.0.7
Amazon Linux · 2023 redis6-debuginfo 0:6.2.14-2.amzn2023.0.7
Amazon Linux · 2023 redis6-debugsource 0:6.2.14-2.amzn2023.0.7
Amazon Linux · 2023 redis6-devel 0:6.2.14-2.amzn2023.0.7
Amazon Linux · 2023 redis6-doc 0:6.2.14-2.amzn2023.0.7

Vulnerabilities 1

  • Medium 6.8
    CVE-2025-9810

    TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes

    TOCTOU  in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen("w") on the history path and subsequent chmod() on the same path.

    antirez linenoise

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-9810.html