critique
SUSE-SU-2025:03499-1
Security update for valkey
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
Aucune source ne donne de score CVSS.
Le label propre à Trivy est CRITICAL. Critique selon SUSE.
Description
This update for valkey to version 8.0.6 fixes the following issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. [bsc#1250995] - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. [bsc#1250995] - CVE-2025-46818: Malicious Lua scripts can be executed in the context of another user. [bsc#1250995] - CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to facilitate denial-of-service attacks. [bsc#1250995]
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.6 | valkey, valkey-compat-redis, valkey-devel | 8.0.6-150600.13.17.1 |
| SUSE Linux Enterprise 15.6 | valkey, valkey-compat-redis, valkey-devel | 8.0.6-150600.13.17.1 |
Afficher les 6 entrées de 2 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| openSUSE Leap 15.6 | valkey | 8.0.6-150600.13.17.1 |
| openSUSE Leap 15.6 | valkey-compat-redis | 8.0.6-150600.13.17.1 |
| openSUSE Leap 15.6 | valkey-devel | 8.0.6-150600.13.17.1 |
| SUSE Linux Enterprise 15.6 | valkey | 8.0.6-150600.13.17.1 |
| SUSE Linux Enterprise 15.6 | valkey-compat-redis | 8.0.6-150600.13.17.1 |
| SUSE Linux Enterprise 15.6 | valkey-devel | 8.0.6-150600.13.17.1 |
Références
- https://bugzilla.suse.com/1250995
- https://lists.suse.com/pipermail/sle-updates/2025-October/042038.html
- https://www.suse.com/security/cve/CVE-2025-46817/
- https://www.suse.com/security/cve/CVE-2025-46818/
- https://www.suse.com/security/cve/CVE-2025-46819/
- https://www.suse.com/security/cve/CVE-2025-49844/
- https://www.suse.com/support/security/rating/
- https://www.suse.com/support/update/announcement/2025/suse-su-202503499-1/