{"schemaVersion":3,"id":"MGASA-2025-0211","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated redis packages fix security vulnerabilities\n\nUpdated redis packages to a more recent version to fix security\nvulnerabilities:\nSome vulnerabilities have been discovered and fixed.\nPlease note this update is from 7.0 to 7.2 which brings some potentially\nbreaking changes. In most cases this update could be installed without\nproblems.\nPotentially Breaking / Behavior Changes:\n* Client side tracking for scripts now tracks the keys that are read by\n  the script instead of the keys that are declared by the caller of EVAL /\n  FCALL (#11770)\n* Freeze time sampling during command execution and in scripts (#10300)\n* When a blocked command is being unblocked, checks like ACL, OOM, etc\n  are re-evaluated (#11012)\n* Unify ACL failure error message text and error codes (#11160)\n* Blocked stream command that's released when key no longer exists\n  carries a different error code (#11012)\n* Command stats are updated for blocked commands only when / if the\n  command actually executes (#11012)\n* The way ACL users are stored internally no longer removes redundant\n  command and category rules, which may alter the way those rules are\n  displayed as part of `ACL SAVE`, `ACL GETUSER` and `ACL LIST` (#11224)\n* Client connections created for TLS-based replication use SNI if\n  possible (#11458)\n* Stream consumers: Re-purpose seen-time, add active-time (#11099)\n* XREADGROUP and X[AUTO]CLAIM create the consumer regardless of whether\n  it was able to perform some reading/claiming (#11099)\n* ACL default newly created user set sanitize-payload flag in ACL\n  LIST/GETUSER #11279\n* Fix HELLO command not to affect the client state unless successful\n  (#11659)\n* Normalize `NAN` in replies to a single nan type, like we do with `inf`\n  (#11597)\n* Cluster SHARD IDs are no longer visible in the cluster nodes output,\n  introduced in 7.2-RC1. (#10536, #12166)\n* When calling PUBLISH with a RESP3 client that's also subscribed to the\n  same channel, the order is changed and the reply is sent before the\n  published message (#12326)","dates":{"published":"2025-07-19T17:55:11.000Z","modified":"2026-04-16T04:43:48.632Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"redis","name":"redis","label":"redis","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/redis","purlType":"rpm","versions":[{"text":"< 7.2.10-1.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.2.10-1.mga9","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2025-0211.html","label":"advisories.mageia.org/MGASA-2025-0211.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34452","label":"bugs.mageia.org/show_bug.cgi?id=34452","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://github.com/redis/redis/releases/tag/7.2.10","label":"github.com/redis/redis/releases/tag/7.2.10","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2023-41056","CVE-2025-27151","CVE-2025-32023","CVE-2025-48367"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2025-07-19T17:55:11.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:43:48.632Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T19:45:16.306Z","stale":false,"partial":false}}