{ "document": { "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_docker/alpinelinux3.24/vex/2026/cve-2026-81934-els_docker-alpinelinux3_24.json" } ], "tracking": { "current_release_date": "2026-09-01T13:16:41Z", "generator": { "date": "2026-09-01T13:16:40Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2026-81934-ELS_DOCKER-ALPINELINUX3.24", "initial_release_date": "2026-08-27T20:18:00Z", "revision_history": [ { "date": "2026-08-27T20:18:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-08-29T12:29:33Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-09-01T13:16:41Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "Security update on CVE-2026-81934" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Alpine Linux 3.24", "product": { "name": "Alpine Linux 3.24", "product_id": "Alpine-Linux-3.24", "product_identification_helper": { "cpe": "cpe:2.3:o:alpinelinux:alpine_linux:3.24:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Alpine Linux" } ], "category": "vendor", "name": "Alpine Linux" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "redis7-7.0.15.tuxcare.els9-r0.x86_64", "product": { "name": "redis7-7.0.15.tuxcare.els9-r0.x86_64", "product_id": "redis7-7.0.15.tuxcare.els9-r0.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/redis7@7.0.15.tuxcare.els9-r0?arch=x86_64&os_name=alpine&os_version=3.24" } } }, { "category": "product_version", "name": "redis7-openrc-7.0.15.tuxcare.els9-r0.x86_64", "product": { "name": "redis7-openrc-7.0.15.tuxcare.els9-r0.x86_64", "product_id": "redis7-openrc-7.0.15.tuxcare.els9-r0.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/redis7-openrc@7.0.15.tuxcare.els9-r0?arch=x86_64&os_name=alpine&os_version=3.24" } } }, { "category": "product_version", "name": "redis6.2-6.2.21.tuxcare.els7-r0.x86_64", "product": { "name": "redis6.2-6.2.21.tuxcare.els7-r0.x86_64", "product_id": "redis6.2-6.2.21.tuxcare.els7-r0.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/redis6.2@6.2.21.tuxcare.els7-r0?arch=x86_64&os_name=alpine&os_version=3.24" } } }, { "category": "product_version", "name": "redis6.2-openrc-6.2.21.tuxcare.els7-r0.x86_64", "product": { "name": "redis6.2-openrc-6.2.21.tuxcare.els7-r0.x86_64", "product_id": "redis6.2-openrc-6.2.21.tuxcare.els7-r0.x86_64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/redis6.2-openrc@6.2.21.tuxcare.els7-r0?arch=x86_64&os_name=alpine&os_version=3.24" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "redis7-7.0.15.tuxcare.els9-r0.aarch64", "product": { "name": "redis7-7.0.15.tuxcare.els9-r0.aarch64", "product_id": "redis7-7.0.15.tuxcare.els9-r0.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/redis7@7.0.15.tuxcare.els9-r0?arch=aarch64&os_name=alpine&os_version=3.24" } } }, { "category": "product_version", "name": "redis7-openrc-7.0.15.tuxcare.els9-r0.aarch64", "product": { "name": "redis7-openrc-7.0.15.tuxcare.els9-r0.aarch64", "product_id": "redis7-openrc-7.0.15.tuxcare.els9-r0.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/redis7-openrc@7.0.15.tuxcare.els9-r0?arch=aarch64&os_name=alpine&os_version=3.24" } } }, { "category": "product_version", "name": "redis6.2-6.2.21.tuxcare.els7-r0.aarch64", "product": { "name": "redis6.2-6.2.21.tuxcare.els7-r0.aarch64", "product_id": "redis6.2-6.2.21.tuxcare.els7-r0.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/redis6.2@6.2.21.tuxcare.els7-r0?arch=aarch64&os_name=alpine&os_version=3.24" } } }, { "category": "product_version", "name": "redis6.2-openrc-6.2.21.tuxcare.els7-r0.aarch64", "product": { "name": "redis6.2-openrc-6.2.21.tuxcare.els7-r0.aarch64", "product_id": "redis6.2-openrc-6.2.21.tuxcare.els7-r0.aarch64", "product_identification_helper": { "purl": "pkg:apk/tuxcare/redis6.2-openrc@6.2.21.tuxcare.els7-r0?arch=aarch64&os_name=alpine&os_version=3.24" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "redis7-7.0.15.tuxcare.els9-r0.x86_64 as a component of Alpine Linux 3.24", "product_id": "Alpine-Linux-3.24:redis7-7.0.15.tuxcare.els9-r0.x86_64" }, "product_reference": "redis7-7.0.15.tuxcare.els9-r0.x86_64", "relates_to_product_reference": "Alpine-Linux-3.24" }, { "category": "default_component_of", "full_product_name": { "name": "redis7-7.0.15.tuxcare.els9-r0.aarch64 as a component of Alpine Linux 3.24", "product_id": "Alpine-Linux-3.24:redis7-7.0.15.tuxcare.els9-r0.aarch64" }, "product_reference": "redis7-7.0.15.tuxcare.els9-r0.aarch64", "relates_to_product_reference": "Alpine-Linux-3.24" }, { "category": "default_component_of", "full_product_name": { "name": "redis7-openrc-7.0.15.tuxcare.els9-r0.x86_64 as a component of Alpine Linux 3.24", "product_id": "Alpine-Linux-3.24:redis7-openrc-7.0.15.tuxcare.els9-r0.x86_64" }, "product_reference": "redis7-openrc-7.0.15.tuxcare.els9-r0.x86_64", "relates_to_product_reference": "Alpine-Linux-3.24" }, { "category": "default_component_of", "full_product_name": { "name": "redis7-openrc-7.0.15.tuxcare.els9-r0.aarch64 as a component of Alpine Linux 3.24", "product_id": "Alpine-Linux-3.24:redis7-openrc-7.0.15.tuxcare.els9-r0.aarch64" }, "product_reference": "redis7-openrc-7.0.15.tuxcare.els9-r0.aarch64", "relates_to_product_reference": "Alpine-Linux-3.24" }, { "category": "default_component_of", "full_product_name": { "name": "redis6.2-6.2.21.tuxcare.els7-r0.aarch64 as a component of Alpine Linux 3.24", "product_id": "Alpine-Linux-3.24:redis6.2-6.2.21.tuxcare.els7-r0.aarch64" }, "product_reference": "redis6.2-6.2.21.tuxcare.els7-r0.aarch64", "relates_to_product_reference": "Alpine-Linux-3.24" }, { "category": "default_component_of", "full_product_name": { "name": "redis6.2-6.2.21.tuxcare.els7-r0.x86_64 as a component of Alpine Linux 3.24", "product_id": "Alpine-Linux-3.24:redis6.2-6.2.21.tuxcare.els7-r0.x86_64" }, "product_reference": "redis6.2-6.2.21.tuxcare.els7-r0.x86_64", "relates_to_product_reference": "Alpine-Linux-3.24" }, { "category": "default_component_of", "full_product_name": { "name": "redis6.2-openrc-6.2.21.tuxcare.els7-r0.aarch64 as a component of Alpine Linux 3.24", "product_id": "Alpine-Linux-3.24:redis6.2-openrc-6.2.21.tuxcare.els7-r0.aarch64" }, "product_reference": "redis6.2-openrc-6.2.21.tuxcare.els7-r0.aarch64", "relates_to_product_reference": "Alpine-Linux-3.24" }, { "category": "default_component_of", "full_product_name": { "name": "redis6.2-openrc-6.2.21.tuxcare.els7-r0.x86_64 as a component of Alpine Linux 3.24", "product_id": "Alpine-Linux-3.24:redis6.2-openrc-6.2.21.tuxcare.els7-r0.x86_64" }, "product_reference": "redis6.2-openrc-6.2.21.tuxcare.els7-r0.x86_64", "relates_to_product_reference": "Alpine-Linux-3.24" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-81934", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.", "title": "Vulnerability description" } ], "product_status": { "under_investigation": [ "Alpine-Linux-3.24:redis6.2-6.2.21.tuxcare.els7-r0.aarch64", "Alpine-Linux-3.24:redis6.2-6.2.21.tuxcare.els7-r0.x86_64", "Alpine-Linux-3.24:redis6.2-openrc-6.2.21.tuxcare.els7-r0.aarch64", "Alpine-Linux-3.24:redis6.2-openrc-6.2.21.tuxcare.els7-r0.x86_64", "Alpine-Linux-3.24:redis7-7.0.15.tuxcare.els9-r0.aarch64", "Alpine-Linux-3.24:redis7-7.0.15.tuxcare.els9-r0.x86_64", "Alpine-Linux-3.24:redis7-openrc-7.0.15.tuxcare.els9-r0.aarch64", "Alpine-Linux-3.24:redis7-openrc-7.0.15.tuxcare.els9-r0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-81934" }, { "category": "external", "summary": "https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834", "url": "https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834" }, { "category": "external", "summary": "https://github.com/v12-security/pocs/tree/main/redis/server_ssl", "url": "https://github.com/v12-security/pocs/tree/main/redis/server_ssl" }, { "category": "external", "summary": "https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES", "url": "https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES" }, { "category": "external", "summary": "https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES", "url": "https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES" }, { "category": "external", "summary": "https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES", "url": "https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES" }, { "category": "external", "summary": "https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES", "url": "https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES" }, { "category": "external", "summary": "https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES", "url": "https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES" }, { "category": "external", "summary": "https://github.com/redis/redis/releases/tag/6.2.24", "url": "https://github.com/redis/redis/releases/tag/6.2.24" }, { "category": "external", "summary": "https://github.com/redis/redis/releases/tag/7.2.16", "url": "https://github.com/redis/redis/releases/tag/7.2.16" }, { "category": "external", "summary": "https://github.com/redis/redis/releases/tag/7.4.11", "url": "https://github.com/redis/redis/releases/tag/7.4.11" }, { "category": "external", "summary": "https://github.com/redis/redis/releases/tag/8.10.1", "url": "https://github.com/redis/redis/releases/tag/8.10.1" }, { "category": "external", "summary": "https://github.com/redis/redis/releases/tag/8.2.9", "url": "https://github.com/redis/redis/releases/tag/8.2.9" }, { "category": "external", "summary": "https://github.com/redis/redis/releases/tag/8.4.6", "url": "https://github.com/redis/redis/releases/tag/8.4.6" }, { "category": "external", "summary": "https://github.com/redis/redis/releases/tag/8.6.6", "url": "https://github.com/redis/redis/releases/tag/8.6.6" }, { "category": "external", "summary": "https://github.com/redis/redis/releases/tag/8.8.2", "url": "https://github.com/redis/redis/releases/tag/8.8.2" }, { "category": "external", "summary": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-239-01.json", "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-239-01.json" }, { "category": "external", "summary": "https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES", "url": "https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES" }, { "category": "external", "summary": "https://raw.githubusercontent.com/redis/redis/7.2/00-RELEASENOTES", "url": "https://raw.githubusercontent.com/redis/redis/7.2/00-RELEASENOTES" }, { "category": "external", "summary": "https://raw.githubusercontent.com/redis/redis/7.4/00-RELEASENOTES", "url": "https://raw.githubusercontent.com/redis/redis/7.4/00-RELEASENOTES" }, { "category": "external", "summary": "https://redis.io/docs/latest/operate/rs/release-notes/rs-7-22-releases/rs-7-22-2-179/", "url": "https://redis.io/docs/latest/operate/rs/release-notes/rs-7-22-releases/rs-7-22-2-179/" }, { "category": "external", "summary": "https://redis.io/docs/latest/operate/rs/release-notes/rs-7-8-releases/rs-7-8-6-303/", "url": "https://redis.io/docs/latest/operate/rs/release-notes/rs-7-8-releases/rs-7-8-6-303/" }, { "category": "external", "summary": "https://redis.io/docs/latest/operate/rs/release-notes/rs-8-0-releases/rs-8-0-20-96/", "url": "https://redis.io/docs/latest/operate/rs/release-notes/rs-8-0-releases/rs-8-0-20-96/" }, { "category": "external", "summary": "https://redis.io/docs/latest/operate/rs/release-notes/rs-8-2-releases/rs-8-2-0-46/", "url": "https://redis.io/docs/latest/operate/rs/release-notes/rs-8-2-releases/rs-8-2-0-46/" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-81934", "url": "https://www.cve.org/CVERecord?id=CVE-2026-81934" } ], "release_date": "2026-08-27T20:18:00Z", "remediations": [ { "category": "none_available", "date": "2026-08-29T12:14:58.856517Z", "details": "Affected", "product_ids": [ "Alpine-Linux-3.24:redis6.2-6.2.21.tuxcare.els7-r0.aarch64", "Alpine-Linux-3.24:redis6.2-6.2.21.tuxcare.els7-r0.x86_64", "Alpine-Linux-3.24:redis6.2-openrc-6.2.21.tuxcare.els7-r0.aarch64", "Alpine-Linux-3.24:redis6.2-openrc-6.2.21.tuxcare.els7-r0.x86_64", "Alpine-Linux-3.24:redis7-7.0.15.tuxcare.els9-r0.aarch64", "Alpine-Linux-3.24:redis7-7.0.15.tuxcare.els9-r0.x86_64", "Alpine-Linux-3.24:redis7-openrc-7.0.15.tuxcare.els9-r0.aarch64", "Alpine-Linux-3.24:redis7-openrc-7.0.15.tuxcare.els9-r0.x86_64" ] } ] } ] }