Skip to content
OpenAdvisories
High ELSA-2025-20926 4 CVEs

Important: redis security update (Oracle Linux 9)

Published Nov 25, 2025 · Updated Nov 25, 2025

Ecosystem: Oracle Linux

Summary

[6.2.20-2]
- rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819

[6.2.19-2]
- fix ownership of /usr/lib64/redis RHEL-6784

[6.2.19-1]
- rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367

[6.2.18-1]
- rebase to 6.2.18 for CVE-2025-21605

[6.2.17-1]
- rebase to 6.2.17 for CVE-2024-46981

[6.2.16-1]
- rebase to 6.2.16 RHEL-26627

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 redis 0:6.2.20-2.el9_7
Oracle Linux · 9 redis-devel 0:6.2.20-2.el9_7
Oracle Linux · 9 redis-doc 0:6.2.20-2.el9_7

Vulnerabilities 4

  • Critical 10.0
    CVE-2025-49844 Public exploit Scanner template EPSS 83%

    Redis Lua Use-After-Free may lead to remote code execution

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code exe…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • High 7.0
    CVE-2025-46817 Public exploit Scanner template

    Lua library commands may lead to integer overflow and potential RCE

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all …

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • Medium 6.3
    CVE-2025-46819 Public exploit Scanner template

    Redis is vulnerable to DoS via specially crafted LUA scripts

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • Medium 6.0
    CVE-2025-46818 Public exploit Scanner template

    Redis: Authenticated users can execute LUA scripts as a different user

    Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine