Red Hat Security AdvisoryRHSA-2026:69521
redis:7 security update
Released 2026-09-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.4) redis-7.0.12-2.module+el9.4.0+24911+6845972a.9.aarch64::redis:7, redis-7.0.12-2.module+el9.4.0+24911+6845972a.9.ppc64le::redis:7, redis-7.0.12-2.module+el9.4.0+24911+6845972a.9.s390x::redis:7 +7
Fixes 3 records
Priority HIGH 68
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support.
CVSS 4.0HIGH 7.5· Adjacent network · Low privileges · No interaction · EPSS 0.00479 · Published 2026-08-27 · Fixed in 8.2.9, 8.4.6 +10 CWE-416
Priority HIGH 68
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer,…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00872 · Published 2026-07-25 · Fixed in 8.8.0 CWE-415
Priority LOW 33
A flaw was found in Redis community.
CVSS 3.1HIGH 7.1· Adjacent network · No auth · No interaction · EPSS 0.00749 · Published 2026-09-17 · Partial fix · 8.0.7-1.el10_1, 8.0.7-1.el9_7 +3 CWE-125
