Skip to content
OpenAdvisories
High ELSA-2025-7686 1 CVE

Important: redis:6 security update (Oracle Linux 8)

Published May 16, 2025 · Updated May 16, 2025

Ecosystem: Oracle Linux

Summary

[6.2.18-1.0.1]
- Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64

[6.2.18-1]
- rebase to 6.2.18 for CVE-2025-21605

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 redis 0:6.2.18-1.0.1.module+el8.10.0+90576+0f5e8f7a
Oracle Linux · 8 redis-devel 0:6.2.18-1.0.1.module+el8.10.0+90576+0f5e8f7a
Oracle Linux · 8 redis-doc 0:6.2.18-1.0.1.module+el8.10.0+90576+0f5e8f7a

Vulnerabilities 1

  • High 7.5
    CVE-2025-21605

    Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

    Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis …

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine