-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 21 Jan 2025 10:10:10 +0000 Source: redis Built-For-Profiles: nocheck Architecture: source Version: 5:7.0.15-3 Distribution: unstable Urgency: high Maintainer: Chris Lamb <lamby@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 1092370 Changes: redis (5:7.0.15-3) unstable; urgency=high . * Fix two security vulnerabilities: . - CVE-2024-46981: An authenticated user could have used a specially-crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. . * CVE-2024-51741: An authenticated user with sufficient privileges may have created a malformed ACL selector which, when accessed, would have triggered a server panic and subsequent denial of service. . (Closes: #1092370) Checksums-Sha1: 6ee02d48091d57ec8a6901f6ea8b8c502a07d11b 2273 redis_7.0.15-3.dsc fff36e24a738a779fdddbbfeef3e1c482d3a6429 31688 redis_7.0.15-3.debian.tar.xz a345a12dd62a146a455bf3e3020654516bea691e 7422 redis_7.0.15-3_amd64.buildinfo Checksums-Sha256: fb4c4c9ec5f62a6ba5170de17c8d2d41cf5638af7d34aa758b791749204b2e3d 2273 redis_7.0.15-3.dsc 304620e16a16fb2cbb4221809846706d58f8e44698664c3a508eebb8764e75bd 31688 redis_7.0.15-3.debian.tar.xz 05a1ea8d8eb14c139fdf44494488142ca46626b1d67b828b988c3a0e2db6e360 7422 redis_7.0.15-3_amd64.buildinfo Files: 2000fb65980d74dffb24807e6a22d447 2273 database optional redis_7.0.15-3.dsc a27d4439061d81e9ba7cf3c416478713 31688 database optional redis_7.0.15-3.debian.tar.xz 9cb866d4b73e4b526ff7f18ab8dca837 7422 database optional redis_7.0.15-3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmePc0EACgkQHpU+J9Qx HljVIA//Qije/mPG7RjLOxltycJuDeeZHn9kqgHYz8zOLYvrQE2gI2DbKw/fWM22 oxrFW3k3auXGQmg44WHBJZImSWsPK9kZuGTjRzb45pfqG2/YZC7jMbE1d7jd4pkr 8ciJ2OzR7adf7OGBO8rTYsgB5clCfHHR1iTW5qx73Cx4CD8XRAL41JxlOhxVlTpv y9KS7fduDbpjW/tT+39mlWEmh4+YgRoA1l2bUoGzFkmPywjfVypXJy7z78GUFTM3 YZdEUoADDAGnPFxU/k8Ao7d91bVVArK0QBbZjb2LU4j9d5zqKBP/oavKD7mJaX8W /GTR5zWyz7ktFYjQAPX+fM7rHXzMFisl6MHiMHxAfY/kYsy0/grpxCDKl3bAKjDu FTg+zpGcDbWG3nkCnnkjjtkj5bhu+cAJtHQlSeid3djEzI5Abe46559jGrjNH3Hu xFL74138JFfFda7rEZtpzOGLUYLfyHGwHLJ0SxZBjhHZoSvblGavE1Q8U1KQ7vz7 5XYrBJGfEouM/8hPB3uhpScUmNv4JRzQ3rHrQ7uh/qnArmumNo4OFXry4ODO5ywJ /DBX5rgLTGpci4m0UJMb2H4NudjDuZ/LlxkBeUyzJUd+LsQYg3NF5CosUFRVMhzD Y/nOJuNFWG8wrUXHcLhRaC+MkGWUfhgMWgYAujwEc6iRi+zokGs= =Kd0X -----END PGP SIGNATURE-----