Red Hat Product Errata RHSA-2026:33444 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33444 - Security Advisory Overview Updated Packages Synopsis Important: redis:7 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for the redis:7 module is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log. Security Fix(es): redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2466788 - CVE-2026-23631 redis: Remote code execution via use-after-free in Lua scripting CVEs CVE-2026-23631 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.src.rpm SHA-256: 253179a141b3351d726c9ccfef636a2361f1c74a1ccec8a4edfa6c77c98f4bfa x86_64 redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: be3b31d9eb3d18a18eefda1e6baf2ac1dd46a40e9883db1524aaef80d9eb511a redis-debuginfo-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: 117ed4eabf9150a8486796923d400f92ee14f36b843f9d7c62a5aa9a9d72b818 redis-debugsource-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: 24d047565f440e389b4870446bc036fbb18467488991112416e1dbd9502dc232 redis-devel-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: 9e3a9af9e6f016c8d94853992edd5d95a668a6bbd797242de56fde6a16bf20fd redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.src.rpm SHA-256: 253179a141b3351d726c9ccfef636a2361f1c74a1ccec8a4edfa6c77c98f4bfa ppc64le redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.ppc64le.rpm SHA-256: 94b828b6b62f9d7f3e7fcea4853e7c2bf8c5af81041328a864bfa26941d054e7 redis-debuginfo-7.0.12-2.module+el9.4.0+24450+e284b512.8.ppc64le.rpm SHA-256: 96108bed22ff38b6beda963c0c34fd19dfd25af099cb06ba89bd78012a768cd2 redis-debugsource-7.0.12-2.module+el9.4.0+24450+e284b512.8.ppc64le.rpm SHA-256: 1236de7f6b5b362c54977c18dd151a13c1d243a9843f656dd933c2be3d422cb1 redis-devel-7.0.12-2.module+el9.4.0+24450+e284b512.8.ppc64le.rpm SHA-256: ae0ef24451a5ac24d58f1ad5f3284afe967ec34acd0974abb2875a4ea14b148a redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.src.rpm SHA-256: 253179a141b3351d726c9ccfef636a2361f1c74a1ccec8a4edfa6c77c98f4bfa x86_64 redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: be3b31d9eb3d18a18eefda1e6baf2ac1dd46a40e9883db1524aaef80d9eb511a redis-debuginfo-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: 117ed4eabf9150a8486796923d400f92ee14f36b843f9d7c62a5aa9a9d72b818 redis-debugsource-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: 24d047565f440e389b4870446bc036fbb18467488991112416e1dbd9502dc232 redis-devel-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: 9e3a9af9e6f016c8d94853992edd5d95a668a6bbd797242de56fde6a16bf20fd redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.src.rpm SHA-256: 253179a141b3351d726c9ccfef636a2361f1c74a1ccec8a4edfa6c77c98f4bfa aarch64 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.aarch64.rpm SHA-256: 799ee89ea378b783100519c9782341e2c9778548ecdf4cf110d21b9569596cce redis-debuginfo-7.0.12-2.module+el9.4.0+24450+e284b512.8.aarch64.rpm SHA-256: 98f64fabf8e56fcf5153136bd9e529eb8220f18f86a2abb6c7e33f539d653962 redis-debugsource-7.0.12-2.module+el9.4.0+24450+e284b512.8.aarch64.rpm SHA-256: 44f51a66bd62035cd7bcc6754a5dac75b567b54bf488c15a6186bcc073d330e0 redis-devel-7.0.12-2.module+el9.4.0+24450+e284b512.8.aarch64.rpm SHA-256: c9d211f9541d8715ec55955337890305a44b42cd47b5757d8ea66e01c98e4bd5 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.src.rpm SHA-256: 253179a141b3351d726c9ccfef636a2361f1c74a1ccec8a4edfa6c77c98f4bfa s390x redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.s390x.rpm SHA-256: dd19e725a99471e8b993a0ffbd3e662c8c718bca49d18cd3a8aa9e49b36aca3c redis-debuginfo-7.0.12-2.module+el9.4.0+24450+e284b512.8.s390x.rpm SHA-256: 1a49f28130e4175f5e55755c312bfae09b77190fe5bf627dbbe664edb5b26e3e redis-debugsource-7.0.12-2.module+el9.4.0+24450+e284b512.8.s390x.rpm SHA-256: 3ef9a072a8d1287ae856313a2084dcaf97a8db5c2da4c1ca619b97fc4fa9e34a redis-devel-7.0.12-2.module+el9.4.0+24450+e284b512.8.s390x.rpm SHA-256: 7d811c5e062e4e63d6e5db0e1c30b61933b172a0242ab40185b7f048ecbd3db4 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 SRPM redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.src.rpm SHA-256: 253179a141b3351d726c9ccfef636a2361f1c74a1ccec8a4edfa6c77c98f4bfa x86_64 redis-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: be3b31d9eb3d18a18eefda1e6baf2ac1dd46a40e9883db1524aaef80d9eb511a redis-debuginfo-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: 117ed4eabf9150a8486796923d400f92ee14f36b843f9d7c62a5aa9a9d72b818 redis-debugsource-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: 24d047565f440e389b4870446bc036fbb18467488991112416e1dbd9502dc232 redis-devel-7.0.12-2.module+el9.4.0+24450+e284b512.8.x86_64.rpm SHA-256: 9e3a9af9e6f016c8d94853992edd5d95a668a6bbd797242de56fde6a16bf20fd redis-doc-7.0.12-2.module+el9.4.0+24450+e284b512.8.noarch.rpm SHA-256: 2b125e3044760f5700dd41dafd88826840c47fda10fcd3016fcc06b78acb3f28 redis-doc-7.0.12-2.module+el
A use-after-free vulnerability (CVE-2026-23631, CVSS 8.1 HIGH) in Redis's Lua scripting engine allows for remote code execution. The vulnerability affects Redis versions prior to 8.6.3. The fix is to upgrade Redis to version 8.6.3.