Skip to content
OpenAdvisories
High ELSA-2025-7438 1 CVE

Important: redis security update (Oracle Linux 9)

Published May 22, 2025 · Updated May 22, 2025

Ecosystem: Oracle Linux

Summary

[6.2.18-1]
- rebase to 6.2.18 for CVE-2025-21605

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 redis 0:6.2.18-1.el9_6
Oracle Linux · 9 redis-devel 0:6.2.18-1.el9_6
Oracle Linux · 9 redis-doc 0:6.2.18-1.el9_6

Vulnerabilities 1

  • High 7.5
    CVE-2025-21605

    Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

    Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis …

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine