Skip to content
OpenAdvisories
High RHSA-2025:7438 1 CVE

Red Hat Security Advisory: redis security update

Published May 14, 2025 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 5

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream redis 0:6.2.18-1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream redis-debuginfo 0:6.2.18-1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream redis-debugsource 0:6.2.18-1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream redis-devel 0:6.2.18-1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream redis-doc 0:6.2.18-1.el9_6

Vulnerabilities 1

  • High 7.5
    CVE-2025-21605

    Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

    Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis …

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2361883
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7438.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-21605
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-21605
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-21605
  • article
    https://github.com/redis/redis/releases/tag/7.4.3
  • article
    https://github.com/redis/redis/security/advisories/GHSA-r67f-p999-2gff