Red Hat Security AdvisoryRHSA-2026:69534
redis:6 security update
Released 2026-09-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) redis-6.0.9-5.module+el8.6.0+24913+caade4b4.8.src::redis:6, redis-6.0.9-5.module+el8.6.0+24913+caade4b4.8.x86_64::redis:6, redis-devel-6.0.9-5.module+el8.6.0+24913+caade4b4.8.x86_64::redis:6 +1
- Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) redis-6.0.9-5.module+el8.6.0+24913+caade4b4.8.aarch64::redis:6, redis-6.0.9-5.module+el8.6.0+24913+caade4b4.8.ppc64le::redis:6, redis-6.0.9-5.module+el8.6.0+24913+caade4b4.8.s390x::redis:6 +7
Fixes 2 records
Priority HIGH 68
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support.
CVSS 4.0HIGH 7.5· Adjacent network · Low privileges · No interaction · EPSS 0.00479 · Published 2026-08-27 · Fixed in 8.2.9, 8.4.6 +10 CWE-416
Priority HIGH 68
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by more than one consumer,…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00872 · Published 2026-07-25 · Fixed in 8.8.0 CWE-415
