SUSE-CU-2025:7260-1: Security update of private-registry/harbor-valkey

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: private-registry/harbor-valkey
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:7260-1
Container Tags        : private-registry/harbor-valkey:8.0.6 , private-registry/harbor-valkey:8.0.6-2.44 , private-registry/harbor-valkey:latest
Container Release     : 2.44
Severity              : critical
Type                  : security
References            : 1250995 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844
-----------------------------------------------------------------

The container private-registry/harbor-valkey was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:3499-1
Released:    Wed Oct  8 20:35:17 2025
Summary:     Security update for valkey
Type:        security
Severity:    critical
References:  1250995,CVE-2025-46817,CVE-2025-46818,CVE-2025-46819,CVE-2025-49844
This update for valkey to version 8.0.6 fixes the following issues:

- CVE-2025-49844: Malicious Lua scripts may lead to remote code execution.
  [bsc#1250995]

- CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and
  potential remote code execution. [bsc#1250995]

- CVE-2025-46818: Malicious Lua scripts can be executed in the context of
  another user. [bsc#1250995]

- CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to
  facilitate denial-of-service attacks. [bsc#1250995]


The following package changes have been done:

- valkey-8.0.6-150600.13.17.1 updated
- container:suse-sle15-15.6-6429c740360927063bab19b5f63298ae2d71284ae35513c7a3f6d6d1593efc7b-0 updated