{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Critical" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"redis security update", "category":"general", "title":"Synopsis" }, { "text":"An update for redis is now available for openEuler-22.03-LTS-SP4", "category":"general", "title":"Summary" }, { "text":"Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets.\n\nSecurity Fix(es):\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.(CVE-2025-46817)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.(CVE-2025-46818)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting.(CVE-2025-46819)\n\nRedis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.(CVE-2025-49844)", "category":"general", "title":"Description" }, { "text":"An update for redis is now available for openEuler-22.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of critical. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Critical", "category":"general", "title":"Severity" }, { "text":"redis", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2025-2450", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2450" }, { "summary":"CVE-2025-46817", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-46817&packageName=redis" }, { "summary":"CVE-2025-46818", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-46818&packageName=redis" }, { "summary":"CVE-2025-46819", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-46819&packageName=redis" }, { "summary":"CVE-2025-49844", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-49844&packageName=redis" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46817" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46818" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46819" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49844" }, { "summary":"openEuler-SA-2025-2450 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2025/csaf-openeuler-sa-2025-2450.json" } ], "title":"An update for redis is now available for openEuler-22.03-LTS-SP4", "tracking":{ "initial_release_date":"2025-10-17T22:57:19+08:00", "revision_history":[ { "date":"2025-10-17T22:57:19+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2025-10-17T22:57:19+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2025-10-17T22:57:19+08:00", "id":"openEuler-SA-2025-2450", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"openEuler-22.03-LTS-SP4", "name":"openEuler-22.03-LTS-SP4" }, "name":"openEuler-22.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"redis-7.2.11-1.oe2203sp4.x86_64.rpm", "name":"redis-7.2.11-1.oe2203sp4.x86_64.rpm" }, "name":"redis-7.2.11-1.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"redis-debuginfo-7.2.11-1.oe2203sp4.x86_64.rpm", "name":"redis-debuginfo-7.2.11-1.oe2203sp4.x86_64.rpm" }, "name":"redis-debuginfo-7.2.11-1.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"redis-debugsource-7.2.11-1.oe2203sp4.x86_64.rpm", "name":"redis-debugsource-7.2.11-1.oe2203sp4.x86_64.rpm" }, "name":"redis-debugsource-7.2.11-1.oe2203sp4.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"redis-7.2.11-1.oe2203sp4.aarch64.rpm", "name":"redis-7.2.11-1.oe2203sp4.aarch64.rpm" }, "name":"redis-7.2.11-1.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"redis-debuginfo-7.2.11-1.oe2203sp4.aarch64.rpm", "name":"redis-debuginfo-7.2.11-1.oe2203sp4.aarch64.rpm" }, "name":"redis-debuginfo-7.2.11-1.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"redis-debugsource-7.2.11-1.oe2203sp4.aarch64.rpm", "name":"redis-debugsource-7.2.11-1.oe2203sp4.aarch64.rpm" }, "name":"redis-debugsource-7.2.11-1.oe2203sp4.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"redis-7.2.11-1.oe2203sp4.src.rpm", "name":"redis-7.2.11-1.oe2203sp4.src.rpm" }, "name":"redis-7.2.11-1.oe2203sp4.src.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"redis-7.2.11-1.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "name":"redis-7.2.11-1.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"redis-debuginfo-7.2.11-1.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "name":"redis-debuginfo-7.2.11-1.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"redis-debugsource-7.2.11-1.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "name":"redis-debugsource-7.2.11-1.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"redis-7.2.11-1.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "name":"redis-7.2.11-1.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"redis-debuginfo-7.2.11-1.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "name":"redis-debuginfo-7.2.11-1.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"redis-debugsource-7.2.11-1.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "name":"redis-debugsource-7.2.11-1.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"redis-7.2.11-1.oe2203sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src", "name":"redis-7.2.11-1.oe2203sp4.src as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2025-46817", "notes":[ { "text":"Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ], "details":"redis security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2450" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2025-46817" }, { "cve":"CVE-2025-46818", "notes":[ { "text":"Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ], "details":"redis security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2450" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.0, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-46818" }, { "cve":"CVE-2025-46819", "notes":[ { "text":"Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ], "details":"redis security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2450" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.3, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-46819" }, { "cve":"CVE-2025-49844", "notes":[ { "text":"Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ], "details":"redis security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2450" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.9, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debuginfo-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-debugsource-7.2.11-1.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:redis-7.2.11-1.oe2203sp4.src" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2025-49844" } ] }