RHEL 8 : redis:6 (RHSA-2026:64823)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64823 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

RHEL 9 : redis (RHSA-2026:64824)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64824 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

ALSA-2026:64823 Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

ALSA-2026:64796 Important: valkey security, bug fix, and enhancement update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

SUSE SLES15 Security Update : redis (SUSE-SU-2026:3638-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3638-1 advisory. This update for redis fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK pending...

SUSE SLES15 Security Update : redis7 (SUSE-SU-2026:3639-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3639-1 advisory. This update for redis7 fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK pending...

SUSE SLES15 Security Update : redis (SUSE-SU-2026:3637-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3637-1 advisory. This update for redis fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK pending...

SUSE SLES15 Security Update : redis7 (SUSE-SU-2026:3636-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3636-1 advisory. This update for redis7 fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK pending...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer bsc1273162. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like Ya...

Security update for redis

This update for redis fixes the following issue: CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer bsc1273162. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaS...

Important: valkey

Issue Overview: A use-after-free vulnerability exists in Valkey's TLS connection handling that can crash the server that can potentially lead to remote code execution. When TLS is enabled, the server keeps a list of connections that have leftover data waiting to be read. While working through tha...

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

A flaw was found in Redis. An authenticated attacker, in an unusual configuration where they can execute the RESTORE command, could exploit a double free vulnerability. This occurs when a specially crafted RESTORE payload references the same NACK pending entry by multiple consumers, and both...

CVE-2026-54341

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack collection loaders, crashing the entire server process SIGSEGV. Because DragonflyDB requires no authentication by defaul...

CVE-2026-54341: Out-of-bounds Read

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack collection loaders, crashing the entire server process SIGSEGV. Because DragonflyDB requires no authentication by defaul...

PT-2026-52864

Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.39.0, a crafted RESTORE payload triggers an out-of-bounds read in DragonflyDB's listpack collection loaders, crashing the entire server process SIGSEGV. Because DragonflyDB requires no authentication by defaul...

SUSE SLES15 Security Update : redis (SUSE-SU-2026:2099-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2099-1 advisory. This update for redis fixes the following issues - CVE-2026-23479: use-after-free in unblock client flow may lead to remote code...

Security update for redis

This update for redis fixes the following issues CVE-2026-23479: use-after-free in unblock client flow may lead to remote code execution bsc1264164. CVE-2026-23631: Lua use-after-free via the master-replica synchronization mechanism may lead to remote code execution bsc1264165. CVE-2026-25243:...

SUSE-SU-2026:2099-1 Security update for redis

This update for redis fixes the following issues - CVE-2026-23479: use-after-free in unblock client flow may lead to remote code execution bsc1264164. - CVE-2026-23631: Lua use-after-free via the master-replica synchronization mechanism may lead to remote code execution bsc1264165. -...

OESA-2026-2237 redis security update

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: When a blocked client is evicted while re-executing a blocked command, an authenticated user may trigger a use-after-free and...