Skip to content
OpenAdvisories
High ELSA-2025-20654 1 CVE

Important: redis security update (Oracle Linux 9)

Published Oct 8, 2025 · Updated Oct 8, 2025

Ecosystem: Oracle Linux

Summary

[7.2.10-1.0.2]
- Fix for CVE-2025-49844 [Orabug: 38515582]

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 redis 0:7.2.10-1.0.2.module+el9.6.0+90681+1a77fe5a
Oracle Linux · 9 redis-devel 0:7.2.10-1.0.2.module+el9.6.0+90681+1a77fe5a
Oracle Linux · 9 redis-doc 0:7.2.10-1.0.2.module+el9.6.0+90681+1a77fe5a

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-49844 Public exploit Scanner template EPSS 83%

    Redis Lua Use-After-Free may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine