-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 13 May 2026 12:00:00 +0800 Source: redis Architecture: source Version: 5:7.0.15-1~deb12u7 Distribution: bookworm-security Urgency: high Maintainer: Chris Lamb <lamby@debian.org> Changed-By: Aron Xu <aron@debian.org> Changes: redis (5:7.0.15-1~deb12u7) bookworm-security; urgency=high . * CVE-2025-67733: RESP protocol injection via Lua error_reply. A user could manipulate data read by a connection by injecting CR/LF sequences into a Redis error reply. 6910256443c7 ("Strip CRLF from error and simple string replies"). * CVE-2026-21863: Remote DoS with malformed Cluster bus message. A peer could send a crafted PING/PONG/MEET packet whose gossip count or ping-extension header exceeds the received packet length, causing out-of-bounds reads and a server crash. Checksums-Sha1: 8c5fbe91f7cb1e981267ea0c083d4fefa8293384 1960 redis_7.0.15-1~deb12u7.dsc 1fec4ec138faebe239bb066d1ca4b76adcc2313c 45456 redis_7.0.15-1~deb12u7.debian.tar.xz 5748793f8c933868e17ff255d2eb11b40fd11c5a 6102 redis_7.0.15-1~deb12u7_source.buildinfo Checksums-Sha256: 700c69619407c47eb51f015752bd3214256932f5e04a7f064a1fdef24c011319 1960 redis_7.0.15-1~deb12u7.dsc 1414177085364a374a89de565845dbb9798ef46c8a91a2726e4485a376b6b9ec 45456 redis_7.0.15-1~deb12u7.debian.tar.xz cc1675181845fac105c50969c3cee79fca72ae3ea0e477e357e9f500f27e89a9 6102 redis_7.0.15-1~deb12u7_source.buildinfo Files: 49087e4431138b82c37e1976d9e72420 1960 database optional redis_7.0.15-1~deb12u7.dsc b0451044c441f174a9d969f62c668666 45456 database optional redis_7.0.15-1~deb12u7.debian.tar.xz 447a38050423e1fe2460df8e1f0bd11d 6102 database optional redis_7.0.15-1~deb12u7_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmoEvGMACgkQ+GQ1dHE8 m66CvAf/eDJktQj3b0xtSt8wFK29Bfw9oMUZ7u0IJsDAZ8Y6PduBf+g4UA8pdh6O dcBVy7DTzg03Cj23oaI08ZryLJlYKc2ASXlhWmq36j7C/nAgaFJEld5smidQZKHm qShpRHba4Hmg7CSZtAukNQHI7triy9gNNIdEtg1AGUvjamG7JAomFa4POwFXoObP Sphoo5QTsf7WvkEyb5TXvCwDHYAAhNzyFyu55IYSE6xqqOQ6iyxtOQ7Bz+WY7bui yCQgm8vgT0TytwLosY89+77bVx1u5cjCg1mrQQS+OzP4+DRpjv7nXtutNKKr042i OI+fexuQiLBUhxjqArV/iPekGMNh3A== =t41v -----END PGP SIGNATURE-----
