Skip to content

Commit a624964

Browse files
committed
Update with more CVEs
1 parent 11cdaa2 commit a624964

File tree

1 file changed

+10
-1
lines changed

1 file changed

+10
-1
lines changed

content/operate/rc/changelog/october-2025.md

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,4 +16,13 @@ tags:
1616

1717
## Security fixes
1818

19-
Redis Cloud has already been updated with a patch for CVE-2025-49844. No further action is required at this time. For more information, see the [Redis blog post](https://redis.io/blog/security-advisory-cve-2025-49844/) about this vulnerability.
19+
Redis Cloud has already been updated with a patches for the following vulnerabilities:
20+
21+
- (CVE-2025-49844) A Lua script may lead to remote code execution
22+
- (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE
23+
- (CVE-2025-46818) A Lua script can be executed in the context of another user
24+
- (CVE-2025-46819) LUA out-of-bound read
25+
26+
No further action is required at this time.
27+
28+
For more information, see the [Redis blog](https://redis.io/blog/security-advisory-cve-2025-49844/) and the [Redis release notes](https://github.com/redis/redis/releases).

0 commit comments

Comments
 (0)