Elektrine
Log in Register

#redis

19 posts · Last used 17d

Back to Timeline
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 30, 2026
A public PoC now targets CVE-2026-66373, a Redis RCE double-free via RESTORE. See affected versions and upgrade to Redis 8.8.0 now. #Redis #RedisRCE #CVE202666373 #RCE #DoubleFree #PoC #RESTORE #Cybersecurity https://securityonline.info/redis-rce-cve-2026-66373/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
0
redis_release_watcher
Redis Release Watcher @redis_release_watcher@mastodon.kodesumber.com · Jul 29, 2026
8.10.0 This is the General Availability release of Redis 8.10 in Redis Open Source. Major changes compared to 8.8 Compact hashes - a new hash encoding that reduces memory usage by storing hash field names just once for keys that share a schema New... https://github.com/redis/redis/releases/tag/8.10.0 #redis #cacheserver #github
0
0
0
0
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 27, 2026
Discover how new Redis RCE exploit PoC code bypasses fixes for CVE-2026-25243 and CVE-2026-25589 across multiple Redis versions. #Redis #Cybersecurity #RCE #Vulnerability #ExploitPoC https://meterpreter.org/redis-rce-exploit-poc/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
0
rhaen
rhaen @rhaen@digitalcourage.social · Jul 25, 2026
Replying to @rhaen@digitalcourage.social
So - und jetzt ist redis auch raus und durch valkey ersetzt. Dann können sie Lizenzen ändern wie sie wollen. Ah. So ich denke nun kann der Samstag starten. #redis #valkey #nextcloud
0
0
0
0
security_crawler_carl
Security Crawler Carl @security_crawler_carl@infosec.exchange · Jul 25, 2026
Replying to @security_crawler_carl@infosec.exchange
Update immediately to Redis 6.2.23, 7.2.15, 7.4.10, 8.2.8, 8.4.5, 8.6.5, or 8.8.1. Reward: You've received a Cracked Cache Crystal — it still works, technically, but something inside rattles. #Redis #ZeroDay #RCE #CyberSecurity #Vulnerability #AchievementUnlocked (3/3)
0
0
0
0
AllAboutSecurity
AllAboutSecurity @AllAboutSecurity@infosec.exchange · Jul 24, 2026
Kimi K3: KI-Agent findet Redis-Schwachstellen in nur 27 Minuten Das neue Sprachmodell Kimi K3 von Moonshot AI hat gezeigt, wie schnell künstliche Intelligenz heute Sicherheitslücken in weit verbreiteter Software finden kann: In nur 27 Minuten identifizierte der Agent mehrere Schwachstellen in der In-Memory-Datenbank Redis, die eine Remote-Code-Ausführung ermöglichen könnten. https://www.all-about-security.de/kimi-k3-ki-agent-findet-redis-schwachstellen-in-nur-27-minuten/ #kimodelle #schwachstellen #redis
0
0
0
0
redis_release_watcher
Redis Release Watcher @redis_release_watcher@mastodon.kodesumber.com · Jul 24, 2026
8.2.8 SECURITY: There are security fixes in the release. Security fixes A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution RedisBloom/RedisBloom#1041 Crafted... https://github.com/redis/redis/releases/tag/8.2.8 #redis #cacheserver #github
0
0
0
0
redis_release_watcher
Redis Release Watcher @redis_release_watcher@mastodon.kodesumber.com · Jul 24, 2026
8.4.5 SECURITY: There are security fixes in the release. Security fixes A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution RedisBloom/RedisBloom#1039 Crafted... https://github.com/redis/redis/releases/tag/8.4.5 #redis #cacheserver #github
0
0
0
0
redis_release_watcher
Redis Release Watcher @redis_release_watcher@mastodon.kodesumber.com · Jul 23, 2026
8.8.1 SECURITY: There is a security fix in the release. Security fixes RedisBloom/RedisBloom#1044 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution https://github.com/redis/redis/releases/tag/8.8.1 #redis #cacheserver #github
0
0
0
0
redis_release_watcher
Redis Release Watcher @redis_release_watcher@mastodon.kodesumber.com · Jul 20, 2026
8.10-RC1 This is the first Release Candidate of Redis 8.10 in Redis Open Source. Release Candidates are feature-complete pre-releases. Pre-releases are not suitable for production use. Headlines: Redis 8.10 introduces new features and performance... https://github.com/redis/redis/releases/tag/8.10-rc1 #redis #cacheserver #github
0
0
0
0
dblanko
D. Blanko @dblanko@infosec.exchange · Jul 11, 2026
Replying to @dblanko@infosec.exchange
VNC: 60 events, 2 IPs. One scanner ran its entire wordlist in 2.5 seconds — 19:32:40 to 19:32:43 UTC. 563 IPs appeared exactly once. 14 IPs generated 10,000+ events each. Full dataset and analysis scripts: github.com/dblanko/honeypot-analysis Full post: sshlab.eu/blog/544908-events-in-20-days-opencanary-multi-service-honeypot-data-74cfe747 #honeypot #infosec #threatintelligence #redis #rdp
0
1
0
0
redis_release_watcher
Redis Release Watcher @redis_release_watcher@mastodon.kodesumber.com · Jul 16, 2026
8.10-m04-int: Update RedisTimeSeries module to v8.9.90 (#15476) Bumps the bundled RedisTimeSeries pin in modules/modules.yaml from v8.9.82 to v8.9.90. Manifest-only change; loadmodule path and build settings unchanged. RediSearch/RedisJSON/RedisBloom are... https://github.com/redis/redis/releases/tag/8.10-m04-int #redis #cacheserver #github
0
0
0
0
gary_alderson
gary @gary_alderson@infosec.exchange · Jul 09, 2026
Replying to @jerry@infosec.exchange
@jerry@infosec.exchange well i do actually appreciate since with wiki mirror if you activate image commons it does make site look great but bogs it down with heavy traffic - the watchdog timer delay is kind of neat #mod_bw #thumbnails #cache hits and misses #redis
0
0
0
0
redis_release_watcher
Redis Release Watcher @redis_release_watcher@mastodon.kodesumber.com · Jul 06, 2026
8.10-m03-int: Improve RESTORE REPLACE performance for new keys (#15397) For a new key, RESTORE REPLACE did three dict lookups (find, delete, add). It now reuses the link from the first lookup for the insert and skips the delete when no key is present, so it does a single lookup. The impact is more visible while the... https://github.com/redis/redis/releases/tag/8.10-m03-int #redis #cacheserver #github
0
0
0
0
adhisimon
Adhidarma Hadiwinoto :verifyc: @adhisimon@mastodon.kodesumber.com · May 05, 2026
RE: https://mastodon.kodesumber.com/@redis_release_watcher/116522696579501450 Yang punya redis, ada security patch buat CVE-2026-25243 dan CVE-2026-23479. #redis #cve #infosec
Quoting
Quoted post
Open quoted post
1
0
0
0
redis_release_watcher
Redis Release Watcher @redis_release_watcher@mastodon.kodesumber.com · May 05, 2026
"There is a new release of redis on github. Happy updating your cache servers." # 6.2.22 Update urgency: SECURITY: There is a security fix in the release. Security fixes (CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote Code Execution Bug fixes SUBSCRIBE, PSUBSCRIBE, SSUBSCRIBE: crash on OOM (RED-167788) SCRIPT... https://github.com/redis/redis/releases/tag/6.2.22 #redis #cacheserver #github
0
0
0
0
adhisimon
Adhidarma Hadiwinoto :verifyc: @adhisimon@mastodon.kodesumber.com · Apr 04, 2026
In the past, I've tried using #redis sentinel for this #mastodon instance. But looks like there is a long standing bug on rubby with redis sentinel. I don't know if it has been resolved now. But I think I found a quick resolve for this problem, using a redis proxy whose support sentinel. And one of my candidate is enriclluelles's redis-sentinel-proxy https://github.com/enriclluelles/redis-sentinel-proxy Will try it soon. There is 3rd party container image at https://hub.docker.com/r/patrickdk/redis-sentinel-proxy #fediadmin
1
0
0
0

You've seen all posts