UbuntuUpdates.org

Package "redis-server"

Name: redis-server

Description:

Persistent key-value database with network interface
Latest version: 5:6.0.16-1ubuntu1.2
Release: jammy (22.04)
Level: updates
Repository: universe
Head package: redis
Homepage: https://redis.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "redis-server"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "redis-server" in Jammy

Repository Area Version
base universe 5:6.0.16-1ubuntu1
security universe 5:6.0.16-1ubuntu1.2

Changelog

Version: 5:6.0.16-1ubuntu1.2 2026-10-07 15:38:13 UTC

redis (5:6.0.16-1ubuntu1.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Use-after-free vulnerability in tlsProcessPendingData()
    - debian/patches/CVE-2026-81934.patch: Fix use-after-free in
      tlsProcessPendingData() pending-list iteration (#1391) in src/tls.c.
    - CVE-2026-81934

 -- Hurman Thu, 01 Oct 2026 15:34:50 +0800
Source diff to previous version
CVE-2026-81934 Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configur

Version: 5:6.0.16-1ubuntu1.1 2025-10-16 10:07:17 UTC

  redis (5:6.0.16-1ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: remote code execution
    - debian/patches/CVE-2025-49844.patch: protect TString on stack
      during parsing to prevent use-after-free condition in lparser.c
    - CVE-2025-49844

 -- Sudhakar Verma <email address hidden> Mon, 13 Oct 2025 22:00:59 +0530
CVE-2025-49844 Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lu


About   -   Send Feedback to @ubuntu_updates