[CLSA-2026:1791826152] Fix CVE(s): CVE-2025-9810
Type:
security
Severity:
Moderate
Release date:
2026-10-12 17:29:24 UTC
Description:
* SECURITY UPDATE: Symlink race (TOCTOU) in the bundled linenoise library when redis-cli saves its command history file - debian/patches/CVE-2025-9810.patch: in linenoiseHistorySave, set the history file permissions with fchmod on the already opened file descriptor instead of chmod on the path - CVE-2025-9810
CVEs fixed:
Updated packages:
  • redis6.2_6.2.21-1~trixie+tuxcare.els10_all.deb
    sha:b4f612dc4ca07b99f774161eef8a46dd20b20114
  • redis6.2-sentinel_6.2.21-1~trixie+tuxcare.els10_amd64.deb
    sha:26ecef0e2b1970e3a6384a5425e3f3da68bac742
  • redis6.2-server_6.2.21-1~trixie+tuxcare.els10_amd64.deb
    sha:5ff604d436390f6b29a816bacd1a05ec18ba4351
  • redis6.2-tools_6.2.21-1~trixie+tuxcare.els10_amd64.deb
    sha:cb4f9b8b1b1861b30c471ccc45854ac278d7406f
  • redis6.2-sentinel_6.2.21-1~trixie+tuxcare.els10_arm64.deb
    sha:262f1e88fc1b7d1b1560dcb3a782338ee06dec76
  • redis6.2-server_6.2.21-1~trixie+tuxcare.els10_arm64.deb
    sha:a9fe9dd9235d983381bf451edbb7bcbbcad9fdc2
  • redis6.2-tools_6.2.21-1~trixie+tuxcare.els10_arm64.deb
    sha:0ca6c84031e9be491ff023d76398cd31d4c9b1b6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.