{"id":"CLSA-2025-1762785221","aliases":[],"status":"published","title":"Update of redis","description":"- update tarball to 6.2.21\n- CVE‑2025‑46818: fix Lua scripting vulnerability allowing code execution by\n  authenticated users\n- CVE‑2025‑46819: fix Lua scripting vulnerability causing out-of-bounds memory\n  access or server crash","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-11-13T08:00:06Z","modified":"2026-06-01T00:31:16Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis","fixed_in":["6.2.21-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-devel","fixed_in":["6.2.21-1.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-doc","fixed_in":["6.2.21-1.el9.tuxcare.els1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.21-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.21-1.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.21-1.el9.tuxcare.els1"}]}]}],"references":[{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1762785221.html","tags":["advisory"]}],"sources":{"osv":[{"id":"CLSA-2025-1762785221","title":"Update of redis","description":"- update tarball to 6.2.21\n- CVE‑2025‑46818: fix Lua scripting vulnerability allowing code execution by\n  authenticated users\n- CVE‑2025‑46819: fix Lua scripting vulnerability causing out-of-bounds memory\n  access or server crash","status":"published","published":"2025-11-13T08:00:06Z","modified":"2026-06-01T00:31:16.166996637Z","updated_at":"2026-11-02T15:43:42.427288Z"}]}}