[CLSA-2026:1779189221] redis7: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-05-19 11:14:04 UTC
Description:
7.0.15-tuxcare.els4-r0: - CVE-2026-23631: Lua script use-after-free on replica during fullsync RCE - CVE-2026-25243: RESTORE command invalid memory access RCE
Updated packages:
  • redis7-7.0.15.tuxcare.els4-rr0.apk
    sha:Q1TT+UCyfSfbqpUvXugtY63dVljqQ=
  • redis7-7.0.15.tuxcare.els4-rr0.apk
    sha:Q1Wpfnmhuu0zxFK2TMh72G+sC8U0Q=
  • redis7-openrc-7.0.15.tuxcare.els4-rr0.apk
    sha:Q1O5jgKMI340k8Yv9LHkQKRBJMWBY=
  • redis7-openrc-7.0.15.tuxcare.els4-rr0.apk
    sha:Q1O5jgKMI340k8Yv9LHkQKRBJMWBY=
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.