Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9 enterprise_linux:9::appstream | redis | 0:7.2.7-1.module+el9.5.0+22705+3d861c1c |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | redis-debuginfo | 0:7.2.7-1.module+el9.5.0+22705+3d861c1c |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | redis-debugsource | 0:7.2.7-1.module+el9.5.0+22705+3d861c1c |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | redis-devel | 0:7.2.7-1.module+el9.5.0+22705+3d861c1c |
| Red Hat · RHEL 9 enterprise_linux:9::appstream | redis-doc | 0:7.2.7-1.module+el9.5.0+22705+3d861c1c |
Vulnerabilities 2
-
High 7.0CVE-2024-46981 Public exploit
Redis' Lua library commands may lead to remote code execution
Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17…
-
Medium 4.4
Redis allows denial-of-service due to malformed ACL selectors
Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2336004
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2336007
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0692.json
-
report
https://access.redhat.com/security/cve/CVE-2024-46981
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-46981
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-46981
-
article
https://github.com/redis/redis/releases/tag/6.2.17
-
article
https://github.com/redis/redis/releases/tag/7.2.7
-
article
https://github.com/redis/redis/releases/tag/7.4.2
-
article
https://github.com/redis/redis/security/advisories/GHSA-39h2-x6c4-6w4c
-
report
https://access.redhat.com/security/cve/CVE-2024-51741
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-51741
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-51741
-
article
https://github.com/redis/redis/security/advisories/GHSA-prpq-rh5h-46g9