Red Hat Security AdvisoryRHSA-2026:69533
redis:6 security update
Released 2026-09-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.8.8) redis-6.2.7-1.module+el8.8.0+24912+36dda224.8.ppc64le::redis:6, redis-6.2.7-1.module+el8.8.0+24912+36dda224.8.src::redis:6, redis-6.2.7-1.module+el8.8.0+24912+36dda224.8.x86_64::redis:6 +3
- Red Hat Enterprise Linux AppStream TUS (v.8.8) redis-6.2.7-1.module+el8.8.0+24912+36dda224.8.src::redis:6, redis-6.2.7-1.module+el8.8.0+24912+36dda224.8.x86_64::redis:6, redis-devel-6.2.7-1.module+el8.8.0+24912+36dda224.8.x86_64::redis:6 +1
Fixes 2 records
Priority HIGH 68
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support.
CVSS 4.0HIGH 7.5· Adjacent network · Low privileges · No interaction · EPSS 0.00479 · Published 2026-08-27 · Fixed in 8.2.9, 8.4.6 +10 CWE-416
Priority HIGH 68
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer,…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00872 · Published 2026-07-25 · Fixed in 8.8.0 CWE-415
