Linux · Security advisory · January 23, 2025

ELSA-2025-0595: Security update for 3 packages

ELSA-2025-0595, released January 23, 2025, fixes 10 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
10
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.7198
99th percentile

Priority of the 10 CVEs

Patch now 0 Urgent 0 High 10 Routine 0

Fixed package versions

ProductReleaseFixed in
redisol 80:6.2.17-1.0.1.module+el8.10.0+90491+f9002f77
redis-develol 80:6.2.17-1.0.1.module+el8.10.0+90491+f9002f77
redis-docol 80:6.2.17-1.0.1.module+el8.10.0+90491+f9002f77

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-22458 redis: Redis is an advanced key-value store 7.0 0.7198 None reported
High CVE-2022-36021 redis: Redis is an in-memory database that persists on disk 7.0 0.5977 None reported
High CVE-2022-24834 redis: Redis is an advanced key-value store 8.8 0.4141 None reported
High CVE-2022-35977 redis: Redis is an in-memory database that persists on disk 7.0 0.1405 None reported
High CVE-2024-46981 redis: Redis is an open source, in-memory database that persists on disk 9.8 0.0818 None reported
High CVE-2024-31449 redis: This update for redis fixes the following issues: - CVE-2024-31227: Fixed parsing issue leading to denail of service... 8.8 0.0446 None reported
High CVE-2023-28856 redis: Redis is an advanced key-value store 7.0 0.0126 None reported
High CVE-2024-31228 redis: This update for redis fixes the following issues: - CVE-2024-31227: Fixed parsing issue leading to denail of service... 7.0 0.0101 None reported
High CVE-2023-25155 redis: Redis is an advanced key-value store 7.0 0.0090 None reported
High CVE-2023-45145 redis: Redis is an advanced key-value store 7.0 0.0044 None reported
Showing 1 to 10 of 10 1