Skip to content
OpenAdvisories
High ELSA-2026-26008 1 CVE

Important: redis:6 security update (Oracle Linux 8)

Published Jun 19, 2026 · Updated Jun 19, 2026

Ecosystem: Oracle Linux

Summary

[6.2.22-1.0.1]
- Build with 64k pages to support redis on both UEK6 and UEK7 on aarch64

[6.2.22-1]
- rebase to 6.2.22 for CVE-2026-25243

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 8 redis 0:6.2.22-1.0.1.module+el8.10.0+90916+da0c6127
Oracle Linux · 8 redis-devel 0:6.2.22-1.0.1.module+el8.10.0+90916+da0c6127
Oracle Linux · 8 redis-doc 0:6.2.22-1.0.1.module+el8.10.0+90916+da0c6127

Vulnerabilities 1

  • High 7.7
    CVE-2026-25243 Public exploit

    redis-server RESTORE invalid memory access may allow remote code execution

    Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that tr…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine