CLSA-2026-1778845249
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778845249.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1778845249
- Upstream
- Published
- 2026-05-15T12:19:27Z
- Modified
- 2026-06-01T00:32:30.981103689Z
- Summary
- redis: Fix of 2 CVEs
- Details
-
- CVE-2026-23631: fix use-after-free in readSyncBulkPayload when fullsync happens while a Lua script is timed out on the replica
- CVE-2026-25243: fix invalid memory access in RESTORE on crafted zipmap, listpack and stream PEL payloads
- References
Affected packages
TuxCare:AlmaLinux:9.2 / redis
Package
- Name
- redis
- Purl
- pkg:rpm/tuxcare/redis?distro=almalinux-9.2
TuxCare:AlmaLinux:9.2 / redis-devel
Package
- Name
- redis-devel
- Purl
- pkg:rpm/tuxcare/redis-devel?distro=almalinux-9.2