This is definitely for you, Marc.
We have thanks to you 8.6.2 in Cauldron.

Assignee: bugsquad => mageia

Updated redis package to the latest version which fixes the following issues:


- (CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution.
- (CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote Code Execution
- (CVE-2026-23631) Lua Use-After-Free may lead to remote code execution
- A user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply

References:
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/CVOEZ7I2TIPXYBFA4UYY5GI5Q4VOAD7C/

https://github.com/redis/redis/releases/tag/7.2.13
https://github.com/redis/redis/releases/tag/7.2.14


Files in core/updates_testing:
redis-7.2.14-1.mga9
redis-debuginfo-7.2.14-1.mga9
redis-debugsource-7.2.14-1.mga9


SRPM:
redis-7.2.14-1.mga9.src.rpm

Assignee: mageia => qa-bugs

Installed and tested without issues.

Tested:
- unix socket only;
- systemd hardening;
- latency test (min: 0, max: 1, avg: 0.17);
- PHP scripts using php-redis extension;
- Qt applications.
All OK. No issues noticed.



System: Mageia 9, x86_64, Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz.



$ uname -a
Linux marte 6.6.138-server-1.mga9 #1 SMP PREEMPT_DYNAMIC Fri May  8 16:15:17 UTC 2026 x86_64 GNU/Linux
$ rpm -q redis
redis-7.2.14-1.mga9
$ systemctl status redis
● redis.service - Redis persistent key-value database
     Loaded: loaded (/etc/systemd/system/redis.service; enabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/redis.service.d
             └─limit.conf
             /etc/systemd/system/redis.service.d
             └─override.conf
     Active: active (running) since Tue 2026-05-12 23:05:17 WEST; 10h ago
   Main PID: 920255 (redis-server)
      Tasks: 6 (limit: 18732)
     Memory: 5.9M
        CPU: 1min 25.878s
     CGroup: /system.slice/redis.service
             └─920255 "/usr/bin/redis-server unixsocket:/run/redis/redis.sock"

<SNIP>
$ cat /etc/systemd/system/redis.service.d/override.conf 
[Service]
Restart=always
RestartSec=5

PrivateNetwork=yes
PrivateUsers=yes
PrivateTmp=yes
PrivateDevices=yes
DevicePolicy=closed
DeviceAllow=

UMask=0007
NoNewPrivileges=yes
LockPersonality=yes
MemoryDenyWriteExecute=true
RemoveIPC=yes

RestrictRealtime=yes
RestrictSUIDSGID=yes
RestrictNamespaces=yes
RestrictAddressFamilies=AF_UNIX
IPAddressDeny=any

SystemCallArchitectures=native
SystemCallFilter=@known
SystemCallFilter=~ @chown @clock @cpu-emulation @keyring @module @mount @obsolete @pkey @reboot @resources @setuid @swap @debug @privileged

ProcSubset=pid
ProtectProc=invisible
ProtectHome=yes
ProtectHostname=yes
ProtectKernelLogs=yes
ProtectClock=yes
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectSystem=strict

AmbientCapabilities=
CapabilityBoundingSet=

StateDirectory=redis
RuntimeDirectory=redis
LogsDirectory=redis

MGA9-64  server Plasma Wayland on Compaq H000SB.
No installation issues. 
Ref bug 34650
# systemctl start redis
[root@mach3 ~]# systemctl -l status redis
● redis.service - Redis persistent key-value database
     Loaded: loaded (/usr/lib/systemd/system/redis.service; disabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/redis.service.d
             └─limit.conf
     Active: active (running) since Wed 2026-05-13 15:40:13 CEST; 24s ago
   Main PID: 40138 (redis-server)
      Tasks: 6 (limit: 8728)
     Memory: 2.8M
        CPU: 137ms
     CGroup: /system.slice/redis.service
             └─40138 "/usr/bin/redis-server 127.0.0.1:6379"

May 13 15:40:13 mach3.hviaene.thuis systemd[1]: Started redis.service.
Similar results with ntopng as in bug 34650

$ cd Documents/
$ redis-cli < redistutorial
OK
"pluto"
OK
(integer) 8
(integer) 9
"9"
(integer) 1
(integer) 1
OK
(integer) 1
(integer) 40
(integer) 40
(integer) 40
OK
(integer) 7
(integer) 8
(integer) 9
1) "David"
2) "David"
3) "David"
4) "Suzy"
5) "Zack"
6) "Suzy"
7) "Zack"
8) "Suzy"
9) "Zack"
1) "David"
2) "David"
1) "David"
2) "David"
Looks all OK

Flags: (none) => test_passed_mga9_64+
CC: (none) => herman.viaene
Whiteboard: (none) => MGA9-64-OK

Validating.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2026-0134.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED