Skip to content
OpenAdvisories
High RHSA-2025:4577 1 CVE

Red Hat Security Advisory: redis security update

Published May 7, 2025 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream redis 0:6.2.6-1.el9_0.2
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream redis-debuginfo 0:6.2.6-1.el9_0.2
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream redis-debugsource 0:6.2.6-1.el9_0.2
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream redis-devel 0:6.2.6-1.el9_0.2
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream redis-doc 0:6.2.6-1.el9_0.2

Vulnerabilities 1

  • High 7.5
    CVE-2025-21605

    Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

    Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis …

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2361883
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4577.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-21605
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21605
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21605
  • article
    https://github.com/redis/redis/releases/tag/7.4.3
  • article
    https://github.com/redis/redis/security/advisories/GHSA-r67f-p999-2gff