Msrc Cbl2 Redis 6.2.16-1 On Cbl Mariner 2.0 vulnerabilities

CVE-2024-46981 [HIGH] CWE-416 Redis' Lua library commands may lead to remote code execution Redis' Lua library commands may lead to remote code execution FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries

CVE-2024-31228 [MEDIUM] CWE-674 Denial-of-service due to unbounded pattern matching in Redis Denial-of-service due to unbounded pattern matching in Redis FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries