-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 13 May 2026 12:00:00 +0800 Source: redis Architecture: source Version: 5:8.0.2-3+deb13u2 Distribution: trixie-security Urgency: high Maintainer: Chris Lamb <lamby@debian.org> Changed-By: Aron Xu <aron@debian.org> Changes: redis (5:8.0.2-3+deb13u2) trixie-security; urgency=high . * CVE-2025-67733: RESP protocol injection via Lua error_reply. A user could manipulate data read by a connection by injecting CR/LF sequences into a Redis error reply. * CVE-2026-21863: Remote DoS with malformed Cluster bus message. A peer could send a crafted PING/PONG/MEET packet whose gossip count or ping-extension header exceeds the received packet length, causing out-of-bounds reads and a server crash. Checksums-Sha1: f8c722edfbccd96f7cc99b8b9eb8f8dad28a06a3 1915 redis_8.0.2-3+deb13u2.dsc 3237f63978e2df95a119117df087e0d55a52ae02 44020 redis_8.0.2-3+deb13u2.debian.tar.xz c17479b85210eb1a1fdfa6f9f96cca67f3c088ee 6098 redis_8.0.2-3+deb13u2_source.buildinfo Checksums-Sha256: 10ace3c9e2aaae8f4920906c0869820cac71bc5d83984b4febe114cb52879101 1915 redis_8.0.2-3+deb13u2.dsc 3384f3beb64638c62b48219c856a7a7424325a08800fd9ba070fb8bf205bfc09 44020 redis_8.0.2-3+deb13u2.debian.tar.xz 6fbee48e263ca59926f7f31264e4a499467390d9ddf41583aaa648908e1ce1ca 6098 redis_8.0.2-3+deb13u2_source.buildinfo Files: 2a49bc3382a192f734a12165095980c0 1915 database optional redis_8.0.2-3+deb13u2.dsc 6bce5fd239e1a1740cee92a97cad36c6 44020 database optional redis_8.0.2-3+deb13u2.debian.tar.xz caeb3299a3de1ee2e3661b353cc12991 6098 database optional redis_8.0.2-3+deb13u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmoEvHgACgkQ+GQ1dHE8 m64E9wf/agRetBj4Lzme0YF+4Hig3lFQMZpQnRF3zwVMH+fvxWUgm5M5GoZfVUF2 YegL4gurG6OlgFmdCB88Vc2HaC81rLaMFjyh2vpje+21A9eaFyWEr0g1OVglUeKw NbBuSMkabxoR2Tl6WRazVkxe9eSb7aKG/XN7YZYWNrD0QdaAuAMYjunnJC0nxxbe 4g+dQ1gJkwpLUBk7YVu0n3RASliFphlSjEiBaDWvFj2hfU4wvFDcO7m6fZddV9g3 xoyfUrdzsS/NlOseVI8THnH6XeLBymc6YXBPDk5vnumjLTFe0qnqvRjz/c4uyuJU ZMxocklpuO6eJmqLXCIBIhzclnotbg== =XSAc -----END PGP SIGNATURE-----
