[CLSA-2026:1789377770] redis: Fix of CVE-2026-81934
Type:
security
Severity:
Important
Release date:
2026-09-14 09:22:59 UTC
Description:
- CVE-2026-81934: fix use-after-free in tlsProcessPendingData() by detaching each pending TLS connection from the head of pending_list before invoking its event handler, instead of iterating with a listIter whose pre-cached next pointer could dangle when the handler closed another connection
CVEs fixed:
Updated packages:
  • redis-6.2.20-1.el9_6.tuxcare.els4.x86_64.rpm
    sha:295b3a391dfa51107100fa7d4ffbffe51810681a54d9dd22faeb2120d9478b37
  • redis-devel-6.2.20-1.el9_6.tuxcare.els4.i686.rpm
    sha:9ff656e7d44bc7e52177656634f68f9202e86a99d6dc7a4b3be3564cfeb64900
  • redis-devel-6.2.20-1.el9_6.tuxcare.els4.x86_64.rpm
    sha:982bd3b801a76a1607b4f8beee13b4958e89563313be510c6526a5fa1065a09f
  • redis-doc-6.2.20-1.el9_6.tuxcare.els4.noarch.rpm
    sha:ed5585104ddb2b3cecd9dd3363c754d4b89a1ba72185e0f7fd4e6f83ad5357fa
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.