Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02231-1

Опубликовано: 07 июл. 2025
Источник: suse-cvrf

Описание

Security update for valkey

This update for valkey fixes the following issues:

  • CVE-2025-27151: Absence of filename size check may cause a stack overflow (bsc#1243804).
  • CVE-2025-49112: setDeferredReply integer underflow (bsc#1243913).

Список пакетов

Container private-registry/harbor-valkey:latest
valkey-8.0.2-150600.13.11.1
Image pr_15_6
valkey-8.0.2-150600.13.11.1
SUSE Linux Enterprise Module for Server Applications 15 SP6
valkey-8.0.2-150600.13.11.1
valkey-compat-redis-8.0.2-150600.13.11.1
valkey-devel-8.0.2-150600.13.11.1
openSUSE Leap 15.6
valkey-8.0.2-150600.13.11.1
valkey-compat-redis-8.0.2-150600.13.11.1
valkey-devel-8.0.2-150600.13.11.1

Ссылки

Описание

Redis is an open source, in-memory database that persists on disk. In versions starting from 7.0.0 to before 8.0.2, a stack-based buffer overflow exists in redis-check-aof due to the use of memcpy with strlen(filepath) when copying a user-supplied file path into a fixed-size stack buffer. This allows an attacker to overflow the stack and potentially achieve code execution. This issue has been patched in version 8.0.2.

Затронутые продукты
Container private-registry/harbor-valkey:latest:valkey-8.0.2-150600.13.11.1
Image pr_15_6:valkey-8.0.2-150600.13.11.1
SUSE Linux Enterprise Module for Server Applications 15 SP6:valkey-8.0.2-150600.13.11.1
SUSE Linux Enterprise Module for Server Applications 15 SP6:valkey-compat-redis-8.0.2-150600.13.11.1
Ссылки

Описание

setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size - prev->used.

Затронутые продукты
Container private-registry/harbor-valkey:latest:valkey-8.0.2-150600.13.11.1
Image pr_15_6:valkey-8.0.2-150600.13.11.1
SUSE Linux Enterprise Module for Server Applications 15 SP6:valkey-8.0.2-150600.13.11.1
SUSE Linux Enterprise Module for Server Applications 15 SP6:valkey-compat-redis-8.0.2-150600.13.11.1
Ссылки