UbuntuUpdates.org

Package "redis"

Name: redis

Description:

Persistent key-value database with network interface (metapackage)
Latest version: 5:6.0.16-1ubuntu1.2
Release: jammy (22.04)
Level: security
Repository: universe
Homepage: https://redis.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "redis"

All arch deb package
APT INSTALL

Other versions of "redis" in Jammy

Repository Area Version
base universe 5:6.0.16-1ubuntu1
updates universe 5:6.0.16-1ubuntu1.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 5:6.0.16-1ubuntu1.2 2026-10-07 15:38:11 UTC

redis (5:6.0.16-1ubuntu1.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Use-after-free vulnerability in tlsProcessPendingData()
    - debian/patches/CVE-2026-81934.patch: Fix use-after-free in
      tlsProcessPendingData() pending-list iteration (#1391) in src/tls.c.
    - CVE-2026-81934

 -- Hurman Thu, 01 Oct 2026 15:34:50 +0800
Source diff to previous version
CVE-2026-81934 Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configur

Version: 5:6.0.16-1ubuntu1.1 2025-10-16 08:07:13 UTC

  redis (5:6.0.16-1ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: remote code execution
    - debian/patches/CVE-2025-49844.patch: protect TString on stack
      during parsing to prevent use-after-free condition in lparser.c
    - CVE-2025-49844

 -- Sudhakar Verma <email address hidden> Mon, 13 Oct 2025 22:00:59 +0530
CVE-2025-49844 Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lu


About   -   Send Feedback to @ubuntu_updates