RHSA-2025:7438: Important: redis security update
Important: redis security update
Other sources
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.<br>Security Fix(es):<br><li> redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client (CVE-2025-21605)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:7438?
The severity of RHSA-2025:7438 is classified as important.
How do I fix RHSA-2025:7438?
To fix RHSA-2025:7438, update Redis to the version 6.2.18-1.el9_6.
Which systems are affected by RHSA-2025:7438?
RHSA-2025:7438 affects Red Hat Enterprise Linux for x86_64, IBM z Systems, ARM 64, and Power architectures.
What component is primarily affected in the RHSA-2025:7438 update?
The primary component affected in the RHSA-2025:7438 update is the Redis package.
Is there a specific Redis package version recommended for RHSA-2025:7438?
Yes, the recommended Redis package version to resolve RHSA-2025:7438 is 6.2.18-1.el9_6.