[CLSA-2026:1791825414] Fix CVE(s): CVE-2025-9810
Type:
security
Severity:
Moderate
Release date:
2026-10-12 17:17:05 UTC
Description:
* SECURITY UPDATE: Symlink race (TOCTOU) in the bundled linenoise library when redis-cli saves its command history file - debian/patches/CVE-2025-9810.patch: in linenoiseHistorySave, set the history file permissions with fchmod on the already opened file descriptor instead of chmod on the path - CVE-2025-9810
CVEs fixed:
Updated packages:
  • redis6.2_6.2.21-1~bookworm+tuxcare.els10_all.deb
    sha:0b35a76d70514b2267b0cfd19098407c30c38511
  • redis6.2-sentinel_6.2.21-1~bookworm+tuxcare.els10_amd64.deb
    sha:2c62864e4f247d27f5e8f6b8b8419c1c031ec8b9
  • redis6.2-server_6.2.21-1~bookworm+tuxcare.els10_amd64.deb
    sha:4e443434b030af3a1b223ce4f09681fca2b42902
  • redis6.2-tools_6.2.21-1~bookworm+tuxcare.els10_amd64.deb
    sha:b27904680fa1bd4128392e0748ba0d7506ad1c42
  • redis6.2-sentinel_6.2.21-1~bookworm+tuxcare.els10_arm64.deb
    sha:b071ea6a7d1042e2c51e51684e5d650f3e8cfbe9
  • redis6.2-server_6.2.21-1~bookworm+tuxcare.els10_arm64.deb
    sha:50adcf043c8264a26bfbc0c9d2b285d4fe6f363b
  • redis6.2-tools_6.2.21-1~bookworm+tuxcare.els10_arm64.deb
    sha:c8d4c5621f87c0cf7d6685c3bfb466f98cff2e60
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.