[CLSA-2026:1769172810] redis7: Fix of 5 CVEs
Type:
security
Severity:
Critical
Release date:
2026-01-29 17:09:19 UTC
Description:
7.0.15-tuxcare.els1-r0: - CVE-2025-27151: stack overflow via oversized filename - CVE-2025-46817: Lua unpack() integer overflow RCE - CVE-2025-46818: Lua metatable hijack privilege escalation - CVE-2025-46819: Lua OOB read and integer overflow - CVE-2025-49844: Lua parser use-after-free RCE
Updated packages:
  • redis7-7.0.15.tuxcare.els1-rr0.apk
    sha:Q1of3YmgGYooQZXjoiWJxMjSVCuGo=
  • redis7-7.0.15.tuxcare.els1-rr0.apk
    sha:Q1+PJh1iKWnylWzi9Nb1J+mGdaxwM=
  • redis7-openrc-7.0.15.tuxcare.els1-rr0.apk
    sha:Q1rfcEkEkz9B4do98VMku03SIuKa8=
  • redis7-openrc-7.0.15.tuxcare.els1-rr0.apk
    sha:Q1rfcEkEkz9B4do98VMku03SIuKa8=
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.