Skip to content
OpenAdvisories
High ELSA-2025-20653 1 CVE

Important: valkey security update (Oracle Linux 10)

Published Oct 8, 2025 · Updated Oct 8, 2025

Ecosystem: Oracle Linux

Summary

[8.0.4-1.0.1]
- Fix for CVE-2025-49844 [Orabug: 38515582]

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 10 valkey 0:8.0.4-1.0.1.el10_0
Oracle Linux · 10 valkey-devel 0:8.0.4-1.0.1.el10_0

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-49844 Public exploit Scanner template EPSS 83%

    Redis Lua Use-After-Free may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine