Red Hat Product Errata RHSA-2026:28139 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-23 RHSA-2026:28139 - Security Advisory Overview Updated Packages Synopsis Important: redis security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for redis is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2466828 - CVE-2026-25243 redis: RESTORE invalid memory access may allow remote code execution CVEs CVE-2026-25243 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM redis-6.2.7-1.el9_4.6.src.rpm SHA-256: f9e915aff73ed61ac2ea75cad065cb76595a4c20cf50571a30f63b8d4bc2d214 x86_64 redis-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: b7e22627fa7c884a5bacc513a1e1dec609ac5ac663869d9793496de87d0305ac redis-debuginfo-6.2.7-1.el9_4.6.i686.rpm SHA-256: 83a49e215f6826010f5fb86c53d9c861f08db20c3589a4bb980c7b4400aaa602 redis-debuginfo-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: c83ec0608afa81ca711c2e88d4362ff7261e6b0a836507c32852185d791bcfa0 redis-debugsource-6.2.7-1.el9_4.6.i686.rpm SHA-256: b3401a9dd88c9c0c07b51c5fce49d182e9d18767e8b2ccc509e6f973b918f3c3 redis-debugsource-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: 5aff5a46021bcfadafc596516b8d33a883af40bada7973df074868b773d61c28 redis-devel-6.2.7-1.el9_4.6.i686.rpm SHA-256: 28696d2b30cebe389208604e1c1d0a3a1979b001f00249848b6b7db47ec4db57 redis-devel-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: d79ccb1717acb994888d879928f67dab62896c16790000b6920ce43eb0f9282f redis-doc-6.2.7-1.el9_4.6.noarch.rpm SHA-256: 2c199be4a3c1e22abe0377271e0eff5721ecba131ee42a0eabd287c0fe9b7197 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM redis-6.2.7-1.el9_4.6.src.rpm SHA-256: f9e915aff73ed61ac2ea75cad065cb76595a4c20cf50571a30f63b8d4bc2d214 ppc64le redis-6.2.7-1.el9_4.6.ppc64le.rpm SHA-256: c160d4b8bd0a6b0e934538e92cd89197bc168e50a14a9df766977cb1aaca5fa4 redis-debuginfo-6.2.7-1.el9_4.6.ppc64le.rpm SHA-256: 84204e013bee9bbbbba5b1e0d6711928ce9a5891c2737bf84e24c10682a195fa redis-debugsource-6.2.7-1.el9_4.6.ppc64le.rpm SHA-256: 43687a261be82ffa12d6130e912117575136dc96dfea95be74abfdfc49c334f1 redis-devel-6.2.7-1.el9_4.6.ppc64le.rpm SHA-256: df3fd12097d0aa10ae5b8a1a4556e46f74466dd8ba5de643fbda87438d309686 redis-doc-6.2.7-1.el9_4.6.noarch.rpm SHA-256: 2c199be4a3c1e22abe0377271e0eff5721ecba131ee42a0eabd287c0fe9b7197 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM redis-6.2.7-1.el9_4.6.src.rpm SHA-256: f9e915aff73ed61ac2ea75cad065cb76595a4c20cf50571a30f63b8d4bc2d214 x86_64 redis-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: b7e22627fa7c884a5bacc513a1e1dec609ac5ac663869d9793496de87d0305ac redis-debuginfo-6.2.7-1.el9_4.6.i686.rpm SHA-256: 83a49e215f6826010f5fb86c53d9c861f08db20c3589a4bb980c7b4400aaa602 redis-debuginfo-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: c83ec0608afa81ca711c2e88d4362ff7261e6b0a836507c32852185d791bcfa0 redis-debugsource-6.2.7-1.el9_4.6.i686.rpm SHA-256: b3401a9dd88c9c0c07b51c5fce49d182e9d18767e8b2ccc509e6f973b918f3c3 redis-debugsource-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: 5aff5a46021bcfadafc596516b8d33a883af40bada7973df074868b773d61c28 redis-devel-6.2.7-1.el9_4.6.i686.rpm SHA-256: 28696d2b30cebe389208604e1c1d0a3a1979b001f00249848b6b7db47ec4db57 redis-devel-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: d79ccb1717acb994888d879928f67dab62896c16790000b6920ce43eb0f9282f redis-doc-6.2.7-1.el9_4.6.noarch.rpm SHA-256: 2c199be4a3c1e22abe0377271e0eff5721ecba131ee42a0eabd287c0fe9b7197 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM redis-6.2.7-1.el9_4.6.src.rpm SHA-256: f9e915aff73ed61ac2ea75cad065cb76595a4c20cf50571a30f63b8d4bc2d214 aarch64 redis-6.2.7-1.el9_4.6.aarch64.rpm SHA-256: 1ed279228d2659d150677bda4930209fd58bc466166e670aa083b5d9d2678cae redis-debuginfo-6.2.7-1.el9_4.6.aarch64.rpm SHA-256: 6ecc49e3eefdf2968b981f51b54f36d92c805c077f27f4cd67ee5c38de885e5a redis-debugsource-6.2.7-1.el9_4.6.aarch64.rpm SHA-256: 1f3d19ef1e1944d63ecc9aebe40d1f5da44ee33eb8923f54b7d42ea1fef7ae2b redis-devel-6.2.7-1.el9_4.6.aarch64.rpm SHA-256: 3ca09789211e795fc2246dcae92e4f935f5d9636ee99a84b9d7b7aba9d99b93c redis-doc-6.2.7-1.el9_4.6.noarch.rpm SHA-256: 2c199be4a3c1e22abe0377271e0eff5721ecba131ee42a0eabd287c0fe9b7197 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM redis-6.2.7-1.el9_4.6.src.rpm SHA-256: f9e915aff73ed61ac2ea75cad065cb76595a4c20cf50571a30f63b8d4bc2d214 s390x redis-6.2.7-1.el9_4.6.s390x.rpm SHA-256: 4524423da326bf5ea55b757389f544d0b4beae2d041ee8dab82410ec2f0fcd2b redis-debuginfo-6.2.7-1.el9_4.6.s390x.rpm SHA-256: 71707a38a71c71ec6a3e60249ba35e82d57a37aae07890dee9ef8d3358e1a89d redis-debugsource-6.2.7-1.el9_4.6.s390x.rpm SHA-256: d1b461367fc11dc2aef19932277ca4008c83c0e331bdbf9ec4bf827760328936 redis-devel-6.2.7-1.el9_4.6.s390x.rpm SHA-256: e741b96e3d79f2901ef247101b632471506a0fe11270f9306b5e82204130e8ea redis-doc-6.2.7-1.el9_4.6.noarch.rpm SHA-256: 2c199be4a3c1e22abe0377271e0eff5721ecba131ee42a0eabd287c0fe9b7197 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 SRPM redis-6.2.7-1.el9_4.6.src.rpm SHA-256: f9e915aff73ed61ac2ea75cad065cb76595a4c20cf50571a30f63b8d4bc2d214 x86_64 redis-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: b7e22627fa7c884a5bacc513a1e1dec609ac5ac663869d9793496de87d0305ac redis-debuginfo-6.2.7-1.el9_4.6.i686.rpm SHA-256: 83a49e215f6826010f5fb86c53d9c861f08db20c3589a4bb980c7b4400aaa602 redis-debuginfo-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: c83ec0608afa81ca711c2e88d4362ff7261e6b0a836507c32852185d791bcfa0 redis-debugsource-6.2.7-1.el9_4.6.i686.rpm SHA-256: b3401a9dd88c9c0c07b51c5fce49d182e9d18767e8b2ccc509e6f973b918f3c3 redis-debugsource-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: 5aff5a46021bcfadafc596516b8d33a883af40bada7973df074868b773d61c28 redis-devel-6.2.7-1.el9_4.6.i686.rpm SHA-256: 28696d2b30cebe389208604e1c1d0a3a1979b001f00249848b6b7db47ec4db57 redis-devel-6.2.7-1.el9_4.6.x86_64.rpm SHA-256: d79ccb1717acb994888d879928f67dab62896c16790000b6920ce43eb0f9282f redis-doc-6.2.7-1.el9_4.6.noarch.rpm SHA-256: 2c199be4a3c1e22abe0377271e0eff5721ecba131ee42a0eabd287c0fe9b7197 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 SRPM redis-6.2.7-1.el9_4.6.src.rpm SHA-256: f9e915aff73ed61ac2ea75cad065cb76595a4c20cf50571a30f63b8d4bc2d214 aarch64 redis-6.2.7-1.el9_4.6.aarch64.rpm SHA-256: 1ed279228d2659d150677bda4930209fd58bc466166e670aa083b5d9d2678cae redis-debuginfo-6.2.7-1.el9_4.6.aarch64.rpm SHA-256: 6ecc49e3eefdf2968b981f51b54f36d92c805c077f27f4cd67ee5c38de885e5a redis-debugsource-6.2.7-1.el9_4.6.aarch64.rpm SHA-256: 1f3d19ef1e1944d63ecc9aebe40d1f5da44ee33eb8923f54b7d42ea1fef7ae2b redis-devel-6.2.7-1.el9_4.6.aarch64.rpm SHA-256: 3ca09789211e795fc2246dcae92e4f935f5d9636ee99a84b9d7b7aba9d99b93c redis-doc-6.2.7-1.el9_4.6.noarch.rpm SHA-256: 2c199be4a3c1e22abe0377271e0eff5721ecba131ee42a0eabd287c0fe9b7197 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 SRPM redis-6.2.7-1.el9_4.6.src.rpm SHA-256: f9e915aff73ed61ac2ea75cad065cb76595a4c20cf50571a30f63b8d4bc2d214 ppc64le redis-6.2.7-1.el9_4.6.ppc64le.rpm SHA-256: c160d4b8bd0a6b0e934538e92cd89197bc168e50a14a9df766977cb1aaca5fa4 redis-debuginfo-6.2.7-1.el9_4.6.ppc64le.rpm SHA-256: 84204e013bee9bbbbba5b1e0d6711928ce9a5891c2737bf84e24c10682a195fa redis-debugsource-6.2.7-1.el9_4.6.ppc64le.rpm SHA-256: 43687a261be82ffa12d6130e912117575136dc96dfea95be74abfdfc49c334f1 redis-devel-6.2.7-1.el9_4.6.ppc64le.rpm SHA-256: df3fd12097d0aa10ae5b8a1a4556e46f74466dd8ba5de643fbda87438d309686 redis-doc-6.2.7-1.el9_4.6.noarch.rpm SHA-256: 2c199be4a3c1e22abe0377271e0eff5721ecba131ee42a0eabd287c0fe9b7197 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 SRPM redis-6.2.7-1.el9_4.6.src.rpm SHA-256: f9e915aff73ed61ac2ea75cad065cb76595a4c20cf50571a30f63b8d4bc2d214 s390x redis-6.2.7-1.el9_4.6.s390x.rpm SHA-256: 4524423da326bf5ea55b757389f544d0b4beae2d041ee8dab82410ec2f0fcd2b redis-debuginfo-6.2.7-1.el9_4.6.s390x.rpm SHA-256: 71707a38a71c71ec6a3e60249ba35e82d57a37aae07890dee9ef8d3358e1a89d redis-debugsource-6.2.7-1.
A critical vulnerability (CVE-2026-25243) in Redis allows remote code execution via invalid memory access triggered by the RESTORE command. The Red Hat advisory rates this as an Important security update for the redis package on Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. The fix is provided in the updated package version redis-6.2.7-1.el9_4.6.