Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
202
security advisoryremote code executionimportant updateopenSUSE Leap 15.6: SUSE-SU-2025:0161-1 important: redis7 remote execution
An update that solves two vulnerabilities can now be installed.. # Security update for redis7 Announcement ID: SUSE-SU-2025:0161-1 Release Date: 2025-01-17T14:38:51Z Rating: important References: * bsc#1235386 * bsc#1235387 Cross-References: * CVE-2024-46981 * CVE-2024-51741 CVSS scores: * CVE-2024-46981 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-46981 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46981 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-51741 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-51741 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-51741 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for redis7 fixes the following issues: * CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed. (bsc#1235386) * CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading to remote code execution. (bsc#1235387) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-161=1 openSUSE-SLE-15.6-2025-161=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-161=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * redis7-debuginfo-7.0.8-150600.8.6.1 *redis7-debugsource-7.0.8-150600.8.6.1 * redis7-7.0.8-150600.8.6.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * redis7-debuginfo-7.0.8-150600.8.6.1 * redis7-debugsource-7.0.8-150600.8.6.1 * redis7-7.0.8-150600.8.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46981.html * https://www.suse.com/security/cve/CVE-2024-51741.html * https://bugzilla.suse.com/show_bug.cgi?id=1235386 * https://bugzilla.suse.com/show_bug.cgi?id=1235387 . The latest release of Redis 7 resolves two significant concerns regarding remote command execution vulnerabilities and server reliability within the openSUSE environment.. redis7 update, openSUSE security, server applications patch, important advisory. . Severity: Important. LinuxSecurity.com Team
Jan 17, 2025
•Important
OpenSUSE
100
security advisorysecurity issueremote code executionSUSE: 2025:0161-1 important: redis7 remote code execution risk
* bsc#1235386 * bsc#1235387 Cross-References: * CVE-2024-46981 . # Security update for redis7 Announcement ID: SUSE-SU-2025:0161-1 Release Date: 2025-01-17T14:38:51Z Rating: important References: * bsc#1235386 * bsc#1235387 Cross-References: * CVE-2024-46981 * CVE-2024-51741 CVSS scores: * CVE-2024-46981 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-46981 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46981 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-51741 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-51741 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-51741 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for redis7 fixes the following issues: * CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed. (bsc#1235386) * CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading to remote code execution. (bsc#1235387) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-161=1 openSUSE-SLE-15.6-2025-161=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-161=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * redis7-debuginfo-7.0.8-150600.8.6.1 *redis7-debugsource-7.0.8-150600.8.6.1 * redis7-7.0.8-150600.8.6.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * redis7-debuginfo-7.0.8-150600.8.6.1 * redis7-debugsource-7.0.8-150600.8.6.1 * redis7-7.0.8-150600.8.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46981.html * https://www.suse.com/security/cve/CVE-2024-51741.html * https://bugzilla.suse.com/show_bug.cgi?id=1235386 * https://bugzilla.suse.com/show_bug.cgi?id=1235387 . Critical security patch released for redis7 resolving major flaws. Ensure updates are applied to vulnerable installations without delay.. redis7 Security Advisory, SUSE Security Updates, CVSS Ratings, Software Vulnerabilities, Remote Code Execution. . Severity: Important. LinuxSecurity.com Team
Jan 17, 2025
•Important
SuSE
202
security advisoryremote code executionimportantopenSUSE 15.6: SUSE-SU-2025:0163-1 important: redis remote code execution
An update that solves two vulnerabilities can now be installed.. # Security update for redis Announcement ID: SUSE-SU-2025:0163-1 Release Date: 2025-01-17T14:40:03Z Rating: important References: * bsc#1235386 * bsc#1235387 Cross-References: * CVE-2024-46981 * CVE-2024-51741 CVSS scores: * CVE-2024-46981 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-46981 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46981 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-51741 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-51741 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-51741 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for redis fixes the following issues: * CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed. (bsc#1235386) * CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading to remote code execution. (bsc#1235387) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-163=1 openSUSE-SLE-15.6-2025-163=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-163=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * redis-7.2.4-150600.3.6.1 * redis-debuginfo-7.2.4-150600.3.6.1 * redis-debugsource-7.2.4-150600.3.6.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * redis-7.2.4-150600.3.6.1 * redis-debuginfo-7.2.4-150600.3.6.1 * redis-debugsource-7.2.4-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46981.html * https://www.suse.com/security/cve/CVE-2024-51741.html * https://bugzilla.suse.com/show_bug.cgi?id=1235386 * https://bugzilla.suse.com/show_bug.cgi?id=1235387 . This patch for mongodb resolves critical vulnerabilities, improving defenses against unauthorized data access and stability concerns.. redis update, SUSE important advisory, redis vulnerabilities, server application security, openSUSE security. . Severity: Important. LinuxSecurity.com Team
Jan 17, 2025
•Important
OpenSUSE
100
security advisoryremote code executionSUSESUSE: 2025:0163-1 critical: redis security notice on remote code exec
* bsc#1235386 * bsc#1235387 Cross-References: * CVE-2024-46981 . # Security update for redis Announcement ID: SUSE-SU-2025:0163-1 Release Date: 2025-01-17T14:40:03Z Rating: important References: * bsc#1235386 * bsc#1235387 Cross-References: * CVE-2024-46981 * CVE-2024-51741 CVSS scores: * CVE-2024-46981 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-46981 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46981 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-51741 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-51741 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-51741 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for redis fixes the following issues: * CVE-2024-51741: Fixed a bug where malformed ACL selectors can trigger a server panic when accessed. (bsc#1235386) * CVE-2024-46981: Fixed a bug where lua scripts can be used to manipulate the garbage collector, leading to remote code execution. (bsc#1235387) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-163=1 openSUSE-SLE-15.6-2025-163=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-163=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * redis-7.2.4-150600.3.6.1 * redis-debuginfo-7.2.4-150600.3.6.1 * redis-debugsource-7.2.4-150600.3.6.1 * Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * redis-7.2.4-150600.3.6.1 * redis-debuginfo-7.2.4-150600.3.6.1 * redis-debugsource-7.2.4-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-46981.html * https://www.suse.com/security/cve/CVE-2024-51741.html * https://bugzilla.suse.com/show_bug.cgi?id=1235386 * https://bugzilla.suse.com/show_bug.cgi?id=1235387 . Significant changes for Redis on SUSE released in response to recent vulnerabilities, featuring essential patches now accessible.. redis Security Advisory, SUSE updates, remote code execution fix. . Severity: Important. LinuxSecurity.com Team
Jan 17, 2025
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!