oss-sec mailing list archives

Re: Apache Kvrocks affected by CVE-2024-31449 and CVE-2025-49844 (Redis Lua); fixed but no formal advisory

From: Alan Coopersmith <alan.coopersmith () oracle com>
Date: Thu, 16 Apr 2026 10:34:14 -0700

On 4/16/26 05:25, yangjincheng1998 () gmail com wrote:

Both downstream impacts were reported to the Kvrocks project and
acknowledged by the maintainers; fixes have been merged:

   CVE-2024-31449 -> https://github.com/apache/kvrocks/issues/3433
   CVE-2025-49844 -> https://github.com/apache/kvrocks/issues/3434


Are those the links you intended to send?  Both have subjects of
"Duplicate - please ignore" and their descriptions were edited to
just say "This issue was submitted in error. Please ignore."
--
        -Alan Coopersmith-                 alan.coopersmith () oracle com
         Oracle Solaris Engineering - https://blogs.oracle.com/solaris

Current thread:

Apache Kvrocks affected by CVE-2024-31449 and CVE-2025-49844 (Redis Lua); fixed but no formal advisory yangjincheng1998 (Apr 16)
- Re: Apache Kvrocks affected by CVE-2024-31449 and CVE-2025-49844 (Redis Lua); fixed but no formal advisory Alan Coopersmith (Apr 16)
  - Re: Apache Kvrocks affected by CVE-2024-31449 and CVE-2025-49844 (Redis Lua); fixed but no formal advisory yangjincheng1998 (Apr 16)
    - Re: Apache Kvrocks affected by CVE-2024-31449 and CVE-2025-49844 (Redis Lua); fixed but no formal advisory Solar Designer (Apr 16)
    - Re: Apache Kvrocks affected by CVE-2024-31449 and CVE-2025-49844 (Redis Lua); fixed but no formal advisory yangjincheng1998 (Apr 16)