{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for valkey",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for valkey fixes the following issues\n\n- CVE-2025-67733: data tampering and denial of service via improper null character handling in Lua scripts\n  (bsc#1258746).\n- CVE-2026-21863: denial of service via invalid clusterbus packet (bsc#1258788).\n- CVE-2026-23479: use-after-free in unblock client flow may lead to remote code execution (bsc#1264164).\n- CVE-2026-23631: Lua use-after-free via the master-replica synchronization mechanism may lead to remote code execution\n  (bsc#1264165).\n- CVE-2026-25243: invalid memory access in RESTORE command via a specially crafted serialized payload may lead to remote\n  code execution (bsc#1264166).\n\nChanges for valkey:\n\n  - Update to 8.0.9.\n\n  - Update to 8.0.7:\n\n   * Fix ltrim should not call signalModifiedKey when no elements are removed (#2787)\n   * Fix chained replica crash when doing dual channel replication (#2983)\n   * Fix used_memory_dataset underflow due to miscalculated used_memory_overhead (#3005)\n   * Avoids crash during MODULE UNLOAD when ACL rules reference a module command and\n     subcommand (#3160)\n   * Fix server assert on ACL LOAD and resetchannels (#3182)\n   * Fix bug causing no response flush sometimes when IO threads are busy (#3205)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLES-16.0-774",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_21814-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:21814-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202621814-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:21814-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-May/046799.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258746",
        "url": "https://bugzilla.suse.com/1258746"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258788",
        "url": "https://bugzilla.suse.com/1258788"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264164",
        "url": "https://bugzilla.suse.com/1264164"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264165",
        "url": "https://bugzilla.suse.com/1264165"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1264166",
        "url": "https://bugzilla.suse.com/1264166"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-67733 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-67733/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-21863 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-21863/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23479 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23479/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23631 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23631/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-25243 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-25243/"
      }
    ],
    "title": "Security update for valkey",
    "tracking": {
      "current_release_date": "2026-05-18T09:59:25Z",
      "generator": {
        "date": "2026-05-18T09:59:25Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:21814-1",
      "initial_release_date": "2026-05-18T09:59:25Z",
      "revision_history": [
        {
          "date": "2026-05-18T09:59:25Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "valkey-8.0.9-160000.1.1.aarch64",
                "product": {
                  "name": "valkey-8.0.9-160000.1.1.aarch64",
                  "product_id": "valkey-8.0.9-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "valkey-devel-8.0.9-160000.1.1.aarch64",
                "product": {
                  "name": "valkey-devel-8.0.9-160000.1.1.aarch64",
                  "product_id": "valkey-devel-8.0.9-160000.1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "valkey-compat-redis-8.0.9-160000.1.1.noarch",
                "product": {
                  "name": "valkey-compat-redis-8.0.9-160000.1.1.noarch",
                  "product_id": "valkey-compat-redis-8.0.9-160000.1.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "valkey-8.0.9-160000.1.1.ppc64le",
                "product": {
                  "name": "valkey-8.0.9-160000.1.1.ppc64le",
                  "product_id": "valkey-8.0.9-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "valkey-devel-8.0.9-160000.1.1.ppc64le",
                "product": {
                  "name": "valkey-devel-8.0.9-160000.1.1.ppc64le",
                  "product_id": "valkey-devel-8.0.9-160000.1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "valkey-8.0.9-160000.1.1.s390x",
                "product": {
                  "name": "valkey-8.0.9-160000.1.1.s390x",
                  "product_id": "valkey-8.0.9-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "valkey-devel-8.0.9-160000.1.1.s390x",
                "product": {
                  "name": "valkey-devel-8.0.9-160000.1.1.s390x",
                  "product_id": "valkey-devel-8.0.9-160000.1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "valkey-8.0.9-160000.1.1.x86_64",
                "product": {
                  "name": "valkey-8.0.9-160000.1.1.x86_64",
                  "product_id": "valkey-8.0.9-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "valkey-devel-8.0.9-160000.1.1.x86_64",
                "product": {
                  "name": "valkey-devel-8.0.9-160000.1.1.x86_64",
                  "product_id": "valkey-devel-8.0.9-160000.1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise Server 16.0",
                  "product_id": "SUSE Linux Enterprise Server 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP applications 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP applications 16.0",
                  "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-8.0.9-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64"
        },
        "product_reference": "valkey-8.0.9-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-8.0.9-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le"
        },
        "product_reference": "valkey-8.0.9-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-8.0.9-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x"
        },
        "product_reference": "valkey-8.0.9-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-8.0.9-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64"
        },
        "product_reference": "valkey-8.0.9-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-compat-redis-8.0.9-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch"
        },
        "product_reference": "valkey-compat-redis-8.0.9-160000.1.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-8.0.9-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64"
        },
        "product_reference": "valkey-devel-8.0.9-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-8.0.9-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le"
        },
        "product_reference": "valkey-devel-8.0.9-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-8.0.9-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x"
        },
        "product_reference": "valkey-devel-8.0.9-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-8.0.9-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
        },
        "product_reference": "valkey-devel-8.0.9-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-8.0.9-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64"
        },
        "product_reference": "valkey-8.0.9-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-8.0.9-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le"
        },
        "product_reference": "valkey-8.0.9-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-8.0.9-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x"
        },
        "product_reference": "valkey-8.0.9-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-8.0.9-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64"
        },
        "product_reference": "valkey-8.0.9-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-compat-redis-8.0.9-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch"
        },
        "product_reference": "valkey-compat-redis-8.0.9-160000.1.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-8.0.9-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64"
        },
        "product_reference": "valkey-devel-8.0.9-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-8.0.9-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le"
        },
        "product_reference": "valkey-devel-8.0.9-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-8.0.9-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x"
        },
        "product_reference": "valkey-devel-8.0.9-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "valkey-devel-8.0.9-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
        },
        "product_reference": "valkey-devel-8.0.9-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-67733",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-67733"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other users on the same connection. The error handling code for lua scripts does not properly handle null characters. Versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12 fix the issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-67733",
          "url": "https://www.suse.com/security/cve/CVE-2025-67733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258746 for CVE-2025-67733",
          "url": "https://bugzilla.suse.com/1258746"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-18T09:59:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-67733"
    },
    {
      "cve": "CVE-2026-21863",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-21863"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port can send an invalid packet that may cause an out bound read, which might result in the system crashing. The Valkey clusterbus packet processing code does not validate that a clusterbus ping extension packet is located within buffer of the clusterbus packet before attempting to read it. Versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12 fix the issue. As an additional mitigation, don\u0027t expose the cluster bus connection directly to end users, and protect the connection with its own network ACLs.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-21863",
          "url": "https://www.suse.com/security/cve/CVE-2026-21863"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258788 for CVE-2026-21863",
          "url": "https://bugzilla.suse.com/1258788"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-18T09:59:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-21863"
    },
    {
      "cve": "CVE-2026-23479",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23479"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23479",
          "url": "https://www.suse.com/security/cve/CVE-2026-23479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264164 for CVE-2026-23479",
          "url": "https://bugzilla.suse.com/1264164"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-18T09:59:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-23479"
    },
    {
      "cve": "CVE-2026-23631",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23631"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read-only is disabled or can be disabled, which may lead to remote code execution. A workaround is to prevent users from executing Lua scripts or avoid using replicas where replica-read-only is disabled. This is patched in version 8.6.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23631",
          "url": "https://www.suse.com/security/cve/CVE-2026-23631"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264165 for CVE-2026-23631",
          "url": "https://bugzilla.suse.com/1264165"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-18T09:59:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-23631"
    },
    {
      "cve": "CVE-2026-25243",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-25243"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-25243",
          "url": "https://www.suse.com/security/cve/CVE-2026-25243"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1264166 for CVE-2026-25243",
          "url": "https://bugzilla.suse.com/1264166"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:valkey-devel-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-8.0.9-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-compat-redis-8.0.9-160000.1.1.noarch",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:valkey-devel-8.0.9-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-18T09:59:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-25243"
    }
  ]
}