Security News

Cybersecurity news aggregator

🔄
HIGH Updates Red Hat Errata

RHSA-2026:64823: Important: redis:6 security update

This advisory addresses two high-severity vulnerabilities in the Redis 6 module for RHEL 8: a remote code execution flaw via a crafted RESTORE payload (CVE-2026-66373, CVSS 7.5) and an arbitrary code execution flaw via a TLS pending-data list use-after-free (CVE-2026-81934, CVSS 7.1). The vulnerabilities are fixed in the updated `redis-6.2.24-1.module+el8.10.0+24746+7b800ac5` package. Administrators should apply this update immediately.
Read Full Article →

Red Hat Product Errata RHSA-2026:64823 - Security Advisory Issued: 2026-09-08 Updated: 2026-09-08 RHSA-2026:64823 - Security Advisory Overview Updated Packages Synopsis Important: redis:6 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the redis:6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373) redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2506985 - CVE-2026-66373 redis: Redis: Remote Code Execution via specially crafted RESTORE payload BZ - 2525226 - CVE-2026-81934 redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free CVEs CVE-2026-66373 CVE-2026-81934 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.src.rpm SHA-256: fd213f6e0d6ae4a89be670da5cde31aa804c123bbe5c663bca49fab52275e36d x86_64 redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.x86_64.rpm SHA-256: b9d6e83eebcc4da2575c4027e9d6b9e659986e1ee6e0542bb2cc7dc64e1108e0 redis-debuginfo-6.2.24-1.module+el8.10.0+24746+7b800ac5.x86_64.rpm SHA-256: eac0ba6a8178405ac0d697d0650cd8af0cc8308e747c16aee405a4acf1dab3d1 redis-debugsource-6.2.24-1.module+el8.10.0+24746+7b800ac5.x86_64.rpm SHA-256: 699b965cc3a3d1ce5d1ab9ef080f5415ad59c3cfb78c499dad527013073555be redis-devel-6.2.24-1.module+el8.10.0+24746+7b800ac5.x86_64.rpm SHA-256: ad8a4343079ff70c8821051a9b6dd5dc87d1cc72d634b7472d67c385edb559d8 redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac Red Hat Enterprise Linux for IBM z Systems 8 SRPM redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.src.rpm SHA-256: fd213f6e0d6ae4a89be670da5cde31aa804c123bbe5c663bca49fab52275e36d s390x redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.s390x.rpm SHA-256: cb99a34a9587d881bc57b5b7ef5a9c04dbf54040e14320bd9c1a874458aa14e4 redis-debuginfo-6.2.24-1.module+el8.10.0+24746+7b800ac5.s390x.rpm SHA-256: 746a68fcbd258b447e96b51a55deff3f12c3bbf85e4c8e5a60dccc566e25f491 redis-debugsource-6.2.24-1.module+el8.10.0+24746+7b800ac5.s390x.rpm SHA-256: 58c62db5dfb62d142ff0bab044e35be6af46fd1bc9b1a810b57b2b98c4f803b8 redis-devel-6.2.24-1.module+el8.10.0+24746+7b800ac5.s390x.rpm SHA-256: 0a5016b3deaff971cd61aa86e55e9235d9197bb0c7867abcd879135780db2c26 redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac Red Hat Enterprise Linux for Power, little endian 8 SRPM redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.src.rpm SHA-256: fd213f6e0d6ae4a89be670da5cde31aa804c123bbe5c663bca49fab52275e36d ppc64le redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.ppc64le.rpm SHA-256: 2f21cd73dd02aedb73dafe85a9392a6d305c0ea020d07e78b45e5959d1400074 redis-debuginfo-6.2.24-1.module+el8.10.0+24746+7b800ac5.ppc64le.rpm SHA-256: f53361c0dfc22ecc7c3913826074f8c54ca08b36ea111f3e6edd8ad1754e275e redis-debugsource-6.2.24-1.module+el8.10.0+24746+7b800ac5.ppc64le.rpm SHA-256: 7ee87e6359adca27df2ad36297dd6cdf43861520da7b1c31070ea6c3b808af98 redis-devel-6.2.24-1.module+el8.10.0+24746+7b800ac5.ppc64le.rpm SHA-256: 04ac024d44bbfec6570bb2c1b4a967f8f61b9d984bcb62f67248fafd3321f147 redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac Red Hat Enterprise Linux for ARM 64 8 SRPM redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.src.rpm SHA-256: fd213f6e0d6ae4a89be670da5cde31aa804c123bbe5c663bca49fab52275e36d aarch64 redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.aarch64.rpm SHA-256: 47000764d53b85c77a190afc257e8e52b1cded7b5732817788ef3443a5f3b179 redis-debuginfo-6.2.24-1.module+el8.10.0+24746+7b800ac5.aarch64.rpm SHA-256: 6011b05def0ca782c6bf7bd148868d249aa9753203801975dce242d174c8a636 redis-debugsource-6.2.24-1.module+el8.10.0+24746+7b800ac5.aarch64.rpm SHA-256: f3542f8d6e31c9df94c706c8ad44ae382acc91d50e632820e44b1ef7c6d204ee redis-devel-6.2.24-1.module+el8.10.0+24746+7b800ac5.aarch64.rpm SHA-256: e508785c81aeefe4312221d8b21cf1a6de985b0cc6a52e603e3b6ed06ace1746 redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.src.rpm SHA-256: fd213f6e0d6ae4a89be670da5cde31aa804c123bbe5c663bca49fab52275e36d x86_64 redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.x86_64.rpm SHA-256: b9d6e83eebcc4da2575c4027e9d6b9e659986e1ee6e0542bb2cc7dc64e1108e0 redis-debuginfo-6.2.24-1.module+el8.10.0+24746+7b800ac5.x86_64.rpm SHA-256: eac0ba6a8178405ac0d697d0650cd8af0cc8308e747c16aee405a4acf1dab3d1 redis-debugsource-6.2.24-1.module+el8.10.0+24746+7b800ac5.x86_64.rpm SHA-256: 699b965cc3a3d1ce5d1ab9ef080f5415ad59c3cfb78c499dad527013073555be redis-devel-6.2.24-1.module+el8.10.0+24746+7b800ac5.x86_64.rpm SHA-256: ad8a4343079ff70c8821051a9b6dd5dc87d1cc72d634b7472d67c385edb559d8 redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.src.rpm SHA-256: fd213f6e0d6ae4a89be670da5cde31aa804c123bbe5c663bca49fab52275e36d aarch64 redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693bbff60ac redis-6.2.24-1.module+el8.10.0+24746+7b800ac5.aarch64.rpm SHA-256: 47000764d53b85c77a190afc257e8e52b1cded7b5732817788ef3443a5f3b179 redis-debuginfo-6.2.24-1.module+el8.10.0+24746+7b800ac5.aarch64.rpm SHA-256: 6011b05def0ca782c6bf7bd148868d249aa9753203801975dce242d174c8a636 redis-debugsource-6.2.24-1.module+el8.10.0+24746+7b800ac5.aarch64.rpm SHA-256: f3542f8d6e31c9df94c706c8ad44ae382acc91d50e632820e44b1ef7c6d204ee redis-devel-6.2.24-1.module+el8.10.0+24746+7b800ac5.aarch64.rpm SHA-256: e508785c81aeefe4312221d8b21cf1a6de985b0cc6a52e603e3b6ed06ace1746 redis-doc-6.2.24-1.module+el8.10.0+24746+7b800ac5.noarch.rpm SHA-256: 7e225157f2265abd129889b5a87caabbea2c0f47bfb1cd4727946693b

Share this article