Skip to content
OpenAdvisories
Critical ELSA-2025-20656 1 CVE

Critical: redis security update (Oracle Linux 8)

Published Oct 8, 2025 · Updated Oct 8, 2025

Ecosystem: Oracle Linux

Summary

[6.2.9-1.0.2]
- Fix for CVE-2025-49844 [Orabug: 38515582]

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 redis 0:6.2.19-1.0.2.module+el8.10.0+90680+2298f620
Oracle Linux · 8 redis-devel 0:6.2.19-1.0.2.module+el8.10.0+90680+2298f620
Oracle Linux · 8 redis-doc 0:6.2.19-1.0.2.module+el8.10.0+90680+2298f620

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-49844 Public exploit Scanner template EPSS 83%

    Redis Lua Use-After-Free may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine