From 11cdaa26f3ba23459e06ec392e7cb35c9844e52b Mon Sep 17 00:00:00 2001 From: Cameron Bates Date: Tue, 21 Oct 2025 15:30:32 -0400 Subject: [PATCH 1/3] RC: Add CVE to Redis Cloud changelog --- content/operate/rc/changelog/october-2025.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 content/operate/rc/changelog/october-2025.md diff --git a/content/operate/rc/changelog/october-2025.md b/content/operate/rc/changelog/october-2025.md new file mode 100644 index 0000000000..6e9a390c38 --- /dev/null +++ b/content/operate/rc/changelog/october-2025.md @@ -0,0 +1,19 @@ +--- +Title: Redis Cloud changelog (August 2025) +alwaysopen: false +categories: +- docs +- operate +- rc +description: New features, enhancements, and other changes added to Redis Cloud during + August 2025. +highlights: Security fixes +linktitle: August 2025 +weight: 65 +tags: +- changelog +--- + +## Security fixes + +Redis Cloud has already been updated with a patch for CVE-2025-49844. No further action is required at this time. For more information, see the [Redis blog post](https://redis.io/blog/security-advisory-cve-2025-49844/) about this vulnerability. From a6249644ff482ac6fb3a0edd5427f04ff2d4506c Mon Sep 17 00:00:00 2001 From: Cameron Bates Date: Tue, 21 Oct 2025 15:35:40 -0400 Subject: [PATCH 2/3] Update with more CVEs --- content/operate/rc/changelog/october-2025.md | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/content/operate/rc/changelog/october-2025.md b/content/operate/rc/changelog/october-2025.md index 6e9a390c38..ce4a1825a7 100644 --- a/content/operate/rc/changelog/october-2025.md +++ b/content/operate/rc/changelog/october-2025.md @@ -16,4 +16,13 @@ tags: ## Security fixes -Redis Cloud has already been updated with a patch for CVE-2025-49844. No further action is required at this time. For more information, see the [Redis blog post](https://redis.io/blog/security-advisory-cve-2025-49844/) about this vulnerability. +Redis Cloud has already been updated with a patches for the following vulnerabilities: + +- (CVE-2025-49844) A Lua script may lead to remote code execution +- (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE +- (CVE-2025-46818) A Lua script can be executed in the context of another user +- (CVE-2025-46819) LUA out-of-bound read + +No further action is required at this time. + +For more information, see the [Redis blog](https://redis.io/blog/security-advisory-cve-2025-49844/) and the [Redis release notes](https://github.com/redis/redis/releases). From 77718ae59facdd7799a5ae28ad0860680a7ebc93 Mon Sep 17 00:00:00 2001 From: Cameron Bates <102550101+cmilesb@users.noreply.github.com> Date: Tue, 21 Oct 2025 16:36:41 -0400 Subject: [PATCH 3/3] Apply suggestions from code review Co-authored-by: mich-elle-luna <153109578+mich-elle-luna@users.noreply.github.com> --- content/operate/rc/changelog/october-2025.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/content/operate/rc/changelog/october-2025.md b/content/operate/rc/changelog/october-2025.md index ce4a1825a7..8c2b090dd7 100644 --- a/content/operate/rc/changelog/october-2025.md +++ b/content/operate/rc/changelog/october-2025.md @@ -1,14 +1,14 @@ --- -Title: Redis Cloud changelog (August 2025) +Title: Redis Cloud changelog (October 2025) alwaysopen: false categories: - docs - operate - rc description: New features, enhancements, and other changes added to Redis Cloud during - August 2025. + October 2025. highlights: Security fixes -linktitle: August 2025 +linktitle: October 2025 weight: 65 tags: - changelog