kritisch
SUSE-SU-2025:03499-1
Security update for valkey
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
Keine Quelle nennt einen CVSS-Wert.
Trivys eigenes Label ist CRITICAL. Kritisch laut SUSE.
Beschreibung
This update for valkey to version 8.0.6 fixes the following issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. [bsc#1250995] - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. [bsc#1250995] - CVE-2025-46818: Malicious Lua scripts can be executed in the context of another user. [bsc#1250995] - CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to facilitate denial-of-service attacks. [bsc#1250995]
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.6 | valkey, valkey-compat-redis, valkey-devel | 8.0.6-150600.13.17.1 |
| SUSE Linux Enterprise 15.6 | valkey, valkey-compat-redis, valkey-devel | 8.0.6-150600.13.17.1 |
Alle 6 Einträge aus 2 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| openSUSE Leap 15.6 | valkey | 8.0.6-150600.13.17.1 |
| openSUSE Leap 15.6 | valkey-compat-redis | 8.0.6-150600.13.17.1 |
| openSUSE Leap 15.6 | valkey-devel | 8.0.6-150600.13.17.1 |
| SUSE Linux Enterprise 15.6 | valkey | 8.0.6-150600.13.17.1 |
| SUSE Linux Enterprise 15.6 | valkey-compat-redis | 8.0.6-150600.13.17.1 |
| SUSE Linux Enterprise 15.6 | valkey-devel | 8.0.6-150600.13.17.1 |
Referenzen
- https://bugzilla.suse.com/1250995
- https://lists.suse.com/pipermail/sle-updates/2025-October/042038.html
- https://www.suse.com/security/cve/CVE-2025-46817/
- https://www.suse.com/security/cve/CVE-2025-46818/
- https://www.suse.com/security/cve/CVE-2025-46819/
- https://www.suse.com/security/cve/CVE-2025-49844/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2025/suse-su-202503499-1/