File _patchinfo of Package patchinfo.38936
<patchinfo incident="38936">
<issue tracker="cve" id="2025-27151"/>
<issue tracker="cve" id="2025-49112"/>
<issue tracker="bnc" id="1243804">VUL-0: CVE-2025-27151: redis,redis7,valkey: absence of filename size check may cause a stack overflow</issue>
<issue tracker="bnc" id="1243913">VUL-0: CVE-2025-49112: valkey: setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size - prev->used.</issue>
<issue tracker="bnc" id="1243061">L3: Valkey crashes in openssl-3 lib with null pointer de-reference [ref:_00D1igLOd._500TrZUuWt:ref]</issue>
<packager>ateixeira</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for valkey</summary>
<description>This update for valkey fixes the following issues:
- CVE-2025-27151: Absence of filename size check may cause a stack overflow (bsc#1243804).
- CVE-2025-49112: setDeferredReply integer underflow (bsc#1243913).
</description>
</patchinfo>