Most recent entries from all

ALSA-2026:64823 — Important: redis:6 security update

Affected: AlmaLinux:8: redis, AlmaLinux:8: redis-devel, AlmaLinux:8: redis-doc

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.

Security Fix(es):

* redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373) * redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-81934

Affected: Alpaquita:23: redis

EUVD-2026-362121

fkie_cve-2026-81934

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.

GHSA-32xw-c2hw-m34g

RHSA-2026:64823 — Red Hat Security Advisory: redis:6 security update

redis: Redis: Remote Code Execution via specially crafted RESTORE payload redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free

RHSA-2026:69521 — Red Hat Security Advisory: redis:7 security update

redis: Redis: Remote Code Execution via specially crafted RESTORE payload redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free redis: Redis: Out-of-bounds read via crafted cluster bus packets

RLSA-2026:64823 — Important: redis:6 security update

Affected: Rocky Linux:8: redis

Security Fix(es):

* redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)

* redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:3990-1 — Security update for redis

Security update for redis

UBUNTU-CVE-2026-81934

Affected: Ubuntu:Pro:22.04:LTS: redis, Ubuntu:24.04:LTS: redis, Ubuntu:26.04:LTS: redis

VA-26-239-01 — Redis TLS pending-data list use-after-free

WID-SEC-W-2026-3077 — Redis: Mehrere Schwachstellen

Ein Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um Sicherheitsmechanismen zu umgehen, unberechtigt auf Daten zuzugreifen, einen Denial-of-Service-Zustand herbeizuführen oder Speicherinhalte zu manipulieren. Die Ausführung beliebigen Programmcodes ist potenziell möglich.