Skip to content
OpenAdvisories
High ELSA-2026-23229 1 CVE

Important: redis security update (Oracle Linux 9)

Published Jun 24, 2026 · Updated Jun 24, 2026

Ecosystem: Oracle Linux

Summary

[6.2.22-1]
- rebase to 6.2.22 for CVE-2026-25243

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 9 redis 0:6.2.22-1.el9_8
Oracle Linux · 9 redis-devel 0:6.2.22-1.el9_8
Oracle Linux · 9 redis-doc 0:6.2.22-1.el9_8

Vulnerabilities 1

  • High 7.7
    CVE-2026-25243 Public exploit

    redis-server RESTORE invalid memory access may allow remote code execution

    Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that tr…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine