Amazon Linux 2023 : valkey, valkey-devel (ALAS2023-2026-3265)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3265 advisory. hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. CVE-2026-88382 A flaw was found in Redis community. The cluster bus...

Important: valkey

Issue Overview: hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. CVE-2026-88382 A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Redis vulnerabilities (USN-8866-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8866-1 advisory. It was discovered that Redis did not properly manage memory when handling the TLS pending-data list. A remote attacker could...

USN-8866-1 redis vulnerabilities

It was discovered that Redis did not properly manage memory when handling the TLS pending-data list. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2026-81934 It was discovered that Redis incorrectly handled certain inputs when processing cluster bus packets. A...

USN-8866-1: Redis vulnerabilities

It was discovered that Redis did not properly manage memory when handling the TLS pending-data list. A remote attacker could possibly use this issue to execute arbitrary code. CVE-2026-81934 It was discovered that Redis incorrectly handled certain inputs when processing cluster bus packets. A...

SUSE SLES16 Security Update : valkey (SUSE-SU-2026:23986-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23986-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4491-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4491-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4493-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4493-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

Security update for valkey

This update for valkey fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4493-1 Security update for valkey

This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

Security update for valkey

This update for valkey fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4491-1 Security update for valkey

This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

openSUSE 16 Security Update : valkey (openSUSE-SU-2026:21985-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21985-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the...

Rocky Linux 9 [CIQ] Security Update: redis / redis-debuginfo / redis-debugsource / redis-devel / etc Multiple Vulnerabilities (crlsa-2026_65120)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202665120 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Denial of Service via Out-of-Bounds Read in Cluster...

Security update for valkey (important)

openSUSE security update: security update for valkey ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21985-1 Rating: important References: bsc1281417 Cross-References: CVE-2026-92925 CVSS scores: CVE-2026-92925 SUSE : 7.1...

OPENSUSE-SU-2026:21985-1 Security update for valkey

This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

SUSE-SU-2026:23986-1 Security update for valkey

This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...

SUSE SLES15 Security Update : redis7 (SUSE-SU-2026:4375-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4375-1 advisory. This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

SUSE-SU-2026:4377-1 Security update for redis7

This update for redis7 fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417...