redis -- Multiple vulnerabilities

Aviv Yahav reports:

CVE-2022-24735

      By exploiting weaknesses in the Lua script execution
      environment, an attacker with access to Redis can inject
      Lua code that will execute with the (potentially higher)
      privileges of another Redis user.

CVE-2022-24736

      An attacker attempting to load a specially crafted Lua
      script can cause NULL pointer dereference which will
      result with a crash of the redis-server process.