Amazon Linux 2023 Security Advisory: ALAS2023-2025-1066
Advisory Released Date: 2025-07-10
Advisory Updated Date: 2025-07-10
Severity:
Important
Issue Overview:
Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on the heap, which could lead to remote code execution. (CVE-2025-32023)
Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on the heap, which could lead to remote code execution. (CVE-2025-48367)
Affected Packages:
redis6
Issue Correction:
Run dnf update redis6 --releasever 2023.8.20250707 to update your system.
New Packages:
aarch64:
redis6-debuginfo-6.2.14-2.amzn2023.0.6.aarch64
redis6-devel-6.2.14-2.amzn2023.0.6.aarch64
redis6-6.2.14-2.amzn2023.0.6.aarch64
redis6-debugsource-6.2.14-2.amzn2023.0.6.aarch64
noarch:
redis6-doc-6.2.14-2.amzn2023.0.6.noarch
src:
redis6-6.2.14-2.amzn2023.0.6.src
x86_64:
redis6-debuginfo-6.2.14-2.amzn2023.0.6.x86_64
redis6-devel-6.2.14-2.amzn2023.0.6.x86_64
redis6-6.2.14-2.amzn2023.0.6.x86_64
redis6-debugsource-6.2.14-2.amzn2023.0.6.x86_64