Skip to content
OpenAdvisories
High ELSA-2025-20655 1 CVE

Important: redis security update (Oracle Linux 9)

Published Oct 8, 2025 · Updated Oct 8, 2025

Ecosystem: Oracle Linux

Summary

[6.2.19-1.0.1]
- Fix for CVE-2025-49844 [Orabug: 38515582]

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 redis 0:6.2.19-1.0.1.el9_6
Oracle Linux · 9 redis-devel 0:6.2.19-1.0.1.el9_6
Oracle Linux · 9 redis-doc 0:6.2.19-1.0.1.el9_6

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-49844 Public exploit Scanner template EPSS 83%

    Redis Lua Use-After-Free may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine