Description
A permissions flaw was found in redis, which sets weak permissions on certain files and directories that could potentially contain sensitive information. A local, unprivileged user could possibly use this flaw to access unauthorized system information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| [UNKNOWN] | redis | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | redis | 3:3.2.5-2 | — |
| Debian 13 | redis | 3:3.2.5-2 | — |
| Debian 12 | redis | 3:3.2.5-2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | redis | 2:3.0.6-1ubuntu0.3 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | redis | 2:2.8.4-2ubuntu0.2+esm1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenStack 10 | redis | 3.0.6-2.el7ost | RHSA-2017:3226 |
Advisories 1
- RHSA-2017:3226 Red Hat Security Advisory: redis security update Red Hat Security Advisories (RHSA) · Jul 1, 2026
References
- RHSA-2017:3226 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2121
- 94111 vdb-entry