-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 21 Jan 2025 10:00:03 +0000 Source: redis Built-For-Profiles: nocheck Architecture: source Version: 5:7.2.5-3 Distribution: experimental Urgency: high Maintainer: Chris Lamb <lamby@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 1092370 Changes: redis (5:7.2.5-3) experimental; urgency=high . * Fix two security vulnerabilities: . - CVE-2024-46981: An authenticated user could have used a specially-crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. . * CVE-2024-51741: An authenticated user with sufficient privileges may have created a malformed ACL selector which, when accessed, would have triggered a server panic and subsequent denial of service. . (Closes: #1092370) Checksums-Sha1: 0944c1ca3b4dad7f68de397d367c7450c6c43007 2231 redis_7.2.5-3.dsc dc55b08f65061b5e5c82fa6bb9a7918efe107af7 31660 redis_7.2.5-3.debian.tar.xz 16957cf3b24f61297fd65cad38fa74f3e601e653 7407 redis_7.2.5-3_amd64.buildinfo Checksums-Sha256: 8d45273a6877c10e8d9df0f7b16938c08d0d9cad8b4c1fd13e80c6e060b414a7 2231 redis_7.2.5-3.dsc c31511a2333e05b1144cae4ba9e8d13144b6c984052239199553bdebe0989863 31660 redis_7.2.5-3.debian.tar.xz 703583601a7d587a454f0c5c0face093ff4a407e6096a513b51d61257f82ad14 7407 redis_7.2.5-3_amd64.buildinfo Files: 5a1bad846d635e5665827de634352d74 2231 database optional redis_7.2.5-3.dsc ad887ac98263585cb4585a882ead64b3 31660 database optional redis_7.2.5-3.debian.tar.xz 44f4644c1c1af474e73072b77fe17fca 7407 database optional redis_7.2.5-3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmePckgACgkQHpU+J9Qx Hlg7XA/+IGj/BC/6W0WJHYdfz5RYij93nUXUUlSEFAhlxFKTGSv62O+E5GzxIQnn Us6ieeY2TbAPnMeTWK4ayEkbiaA1NRyK6K23plaQwoYGXgORrMI9196/FqbHDmi0 I2sSEqwK3VNDnJVZfbdXGYMlJLWznUE6jAupnMDHWrWwwUD1OXq3ozlgzZrKzPIZ GEBIfnzxAEWMiaik1Hlpyfnsomq++JW8KtO0uMAUb8cOZeaZi60dNTOiuRuZMc5d pYYIdndWygl2Oz/92dZc5CUX4g1K206YLQuBXs9KQk5STST6Oue1pzUVbloKK9i/ bVATw9FdKUsAcXSZBvNqoX9vNUWQkmoGkeAwF84XCdgW/GrLeznzsZEYl7R8sdiw 6JhvM1BzpH7nybtSE7ZY2jsJPCvcX7OE1nUP9tdIYYgXHkBIyweJOiT5dlmwF7X/ MS6dS4e9bzbZUZr85djlh0aK7vwazem8viOj7QKU+WMwckRMmThprNW0h9pRMYul LbnC2sDc8J0LePNA+7CCR5B0eXusliPp1rwla5YUgPdmtRkhxxEQ7f2jqLfr6wLN M2eo3bfh62ZKoCDBBBPB1UTyYX8AbGNG1SAgpsotlxSj6avFb6BKARSwn7q0iRYm w8nRsWILHaNaRwjt1hWQc3nNoZSwp0mSaGf01KmJlR6N+OEnBZU= =BSx3 -----END PGP SIGNATURE-----