OESA-2026-4403

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4403

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-4403.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-4403

Upstream

CVE (3)

Published

2026-10-16T12:00:13Z

Modified

2026-10-16T12:15:20Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

redis security update

Details

Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure path in cifs_issue_read() lest retrying the subreq just overwrites the credits value.(CVE-2026-62356)

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.(CVE-2026-81934)

A vulnerability, which was classified as critical, was found in Redis up to 8.8.1/8.9.x.CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 8.10.0 eliminates this vulnerability.(CVE-2026-92925)

Database specific

{
    "severity":  "High"
}

References

Affected packages

openEuler:24.03-LTS-SP4 / redis

Package

Name: redis
Purl: pkg:rpm/openEuler/redis&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

7.2.16-2.oe2403sp4

Ecosystem specific

{
    "aarch64":  [
        "redis-7.2.16-2.oe2403sp4.aarch64.rpm",
        "redis-debuginfo-7.2.16-2.oe2403sp4.aarch64.rpm",
        "redis-debugsource-7.2.16-2.oe2403sp4.aarch64.rpm"
    ],
    "src":  [
        "redis-7.2.16-2.oe2403sp4.src.rpm"
    ],
    "x86_64":  [
        "redis-7.2.16-2.oe2403sp4.x86_64.rpm",
        "redis-debuginfo-7.2.16-2.oe2403sp4.x86_64.rpm",
        "redis-debugsource-7.2.16-2.oe2403sp4.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-4403.json"