SUSE-CU-2025:7263-1: Security update of suse/valkey

[sle-container-updates at lists.suse.com]

SUSE Container Update Advisory: suse/valkey
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2025:7263-1
Container Tags        : suse/valkey:8 , suse/valkey:8.0 , suse/valkey:8.0.6 , suse/valkey:8.0.6-64.6 , suse/valkey:latest
Container Release     : 64.6
Severity              : critical
Type                  : security
References            : 1250995 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 CVE-2025-49844
-----------------------------------------------------------------

The container suse/valkey was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2025:3502-1
Released:    Thu Oct  9 00:04:11 2025
Summary:     Security update for valkey
Type:        security
Severity:    critical
References:  1250995,CVE-2025-46817,CVE-2025-46818,CVE-2025-46819,CVE-2025-49844
This update for valkey to version 8.0.6 fixes the following security issues:

- CVE-2025-49844: Malicious Lua scripts may lead to remote code execution.
  [bsc#1250995]

- CVE-2025-46817: Malicious Lua scripts may lead to integer overflow and
  potential remote code execution. [bsc#1250995]

- CVE-2025-46818: Malicious Lua scripts can be executed in the context of
  another user. [bsc#1250995]

- CVE-2025-46819: Malicious Lua scripts can trigger out-of-bound reads to
  facilitate denial-of-service attacks. [bsc#1250995]


The following package changes have been done:

- valkey-8.0.6-150700.3.11.1 updated
- container:suse-sle15-15.7-5b0ddc1b793392d929e479d905c39f68b1dbff898fbc8834c86033bcc2277d34-0 updated
- container:registry.suse.com-bci-bci-micro-15.7-c1aae46db7c54cb25fdee08057b82408d4ca85fec3670a0a866563002a249177-0 updated