Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream | redis | 0:6.2.24-1.el9_6 |
| Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream | redis-debuginfo | 0:6.2.24-1.el9_6 |
| Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream | redis-debugsource | 0:6.2.24-1.el9_6 |
| Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream | redis-devel | 0:6.2.24-1.el9_6 |
| Red Hat · RHEL 9.6 EUS rhel_eus:9.6::appstream | redis-doc | 0:6.2.24-1.el9_6 |
Vulnerabilities 2
-
High 7.5
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code executi…
-
High 7.1
Redis TLS pending-data list use-after-free
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the pri…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2506985
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2525226
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67461.json
-
report
https://access.redhat.com/security/cve/CVE-2026-66373
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-66373
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-66373
-
article
https://github.com/berabuddies/redis-poc
-
article
https://github.com/redis/redis/compare/8.6.4...8.8.0
-
article
https://github.com/redis/redis/pull/15081
-
article
https://news.ycombinator.com/item?id=49024938
-
article
https://x.com/Fried_rice/status/2080059356322918777
-
report
https://access.redhat.com/security/cve/CVE-2026-81934
-
advisory
https://www.cve.org/CVERecord?id=CVE-2026-81934
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-81934
-
article
https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834
-
article
https://github.com/v12-security/pocs/tree/main/redis/server_ssl
-
article
https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES
-
article
https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES
-
article
https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES
-
article
https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES
-
article
https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES