critical Security update for redis7

SUSE-SLE-Module-Server-Applications-15-SP6-2025-3500

This update for redis7 fixes the following issues: - CVE-2025-49844: Malicious Lua scripts may lead to remote code execution. [bsc#1250995] - CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and potential remote code execution. [bsc#1250995] - CVE-2025-46818: Malicious Lua scripts can be executed in the context of another user. [bsc#1250995] - CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to facilitate denial-of-service attacks. [bsc#1250995]

• Release Date
  Oct 8 2025
• References
  Bugzilla: 1250995
  CVEs: CVE-2025-49844, CVE-2025-46819, CVE-2025-46818, CVE-2025-46817
• Type
  security
• Severity
  critical

cloud_download Downloads

Server Applications Module 15.6 s390x

• Packages
  redis7
  Persistent key-value database

  7.0.8-150600.8.19.1 lock rpm lock src

Server Applications Module 15.6 aarch64

• Packages
  redis7
  Persistent key-value database

  7.0.8-150600.8.19.1 lock rpm lock src

Server Applications Module 15.6 ppc64le

• Packages
  redis7
  Persistent key-value database

  7.0.8-150600.8.19.1 lock rpm lock src

Server Applications Module 15.6 x86_64

• Packages
  redis7
  Persistent key-value database

  7.0.8-150600.8.19.1 lock rpm lock src