Summary
[7.2.10-1.0.1]
- Build with 64k pages to support redis on UEK on aarch64
[7.2.10-1]
- rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367
[7.2.8-1]
- rebase to 7.2.8 for CVE-2025-21605
[7.2.7-1]
- rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741
[7.2.6-1]
- rebase to 7.2.6 RHEL-26628
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | redis | 0:7.2.10-1.0.1.module+el9.6.0+90637+3ecf02e1 |
| Oracle Linux · 9 | redis-devel | 0:7.2.10-1.0.1.module+el9.6.0+90637+3ecf02e1 |
| Oracle Linux · 9 | redis-doc | 0:7.2.10-1.0.1.module+el9.6.0+90637+3ecf02e1 |
Vulnerabilities 3
-
High 7.5
Redis DoS Vulnerability due to bad connection error handling
Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and…
-
High 7.0CVE-2025-32023 Public exploit
Redis allows out of bounds writes in hyperloglog commands leading to RCE
Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5, 7.2.10, and 6.2.19, an authenticated user may use a specially crafted string to trigger a stack/heap out of bounds write on hyperloglog operations, potentially…
-
Medium 4.7
redis-check-aof may lead to stack overflow and potential RCE
Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path i…