Skip to content
OpenAdvisories
High ELSA-2025-12006 2 CVEs

Important: redis:6 security update (Oracle Linux 8)

Published Jul 29, 2025 · Updated Jul 29, 2025

Ecosystem: Oracle Linux

Summary

[6.2.19-1.0.1]
- Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64

[6.2.19-1]
- rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 redis 0:6.2.19-1.0.1.module+el8.10.0+90636+d63441d5
Oracle Linux · 8 redis-devel 0:6.2.19-1.0.1.module+el8.10.0+90636+d63441d5
Oracle Linux · 8 redis-doc 0:6.2.19-1.0.1.module+el8.10.0+90636+d63441d5

Vulnerabilities 2

  • High 7.5
    CVE-2025-48367

    Redis DoS Vulnerability due to bad connection error handling

    Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • High 7.0
    CVE-2025-32023 Public exploit

    Redis allows out of bounds writes in hyperloglog commands leading to RCE

    Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine