-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 06 Aug 2026 11:09:14 -0700 Source: redis Architecture: source Version: 5:7.0.15-1~deb12u9 Distribution: bookworm-security Urgency: high Maintainer: Chris Lamb <lamby@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Changes: redis (5:7.0.15-1~deb12u9) bookworm-security; urgency=high . * Non-maintainer upload by the Debian LTS team. * CVE-2026-66373: Fix a potential remote-code execution vulnerability. In the unusual case where an authenticated attacker could execute the RESTORE command, a malicious RESTORE payload could have resulted in a double-free. Checksums-Sha1: 00303f381cb9dd6a014762bb43970562785cb92e 2305 redis_7.0.15-1~deb12u9.dsc b5d51660215a5402d146b8ec045ae712a14783de 3025940 redis_7.0.15.orig.tar.gz 05dbc3b5480bc0892a645572357f63606dba2d78 50304 redis_7.0.15-1~deb12u9.debian.tar.xz ddc7d821f6abf573ba6f3d329a69d453fcb84ceb 5613 redis_7.0.15-1~deb12u9_source.buildinfo Checksums-Sha256: 3b1616db84226f47327cf45256cdde774f73dba34140e5bd63f7ea127108df65 2305 redis_7.0.15-1~deb12u9.dsc 4b1dc4ee6d622a09fff9c6777191209750fb5e5a725ef78ea012d6eef4c22982 3025940 redis_7.0.15.orig.tar.gz a8fe339f5b6a81fe9ad58f05304ae76ac5cbee31941e5e69308f4c9e282f6ff9 50304 redis_7.0.15-1~deb12u9.debian.tar.xz 6bf7a97ab5fcb5d077da0e53350b2c459cd559484815085c5add2499392c91bc 5613 redis_7.0.15-1~deb12u9_source.buildinfo Files: 29287cf16a899458f68129aaa321bc6d 2305 database optional redis_7.0.15-1~deb12u9.dsc d4572b9ddf01b3aeeb43859119ad62f9 3025940 database optional redis_7.0.15.orig.tar.gz f1e9d9be83740618ef00b6196154bf5d 50304 database optional redis_7.0.15-1~deb12u9.debian.tar.xz 3181fa6265ab1ec9f306804f0488b709 5613 database optional redis_7.0.15-1~deb12u9_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmp0/BcACgkQHpU+J9Qx HlixUBAAq+sbNp1csIulC1iaymfTuHua1wSXwVPeIuGvOmFQdxUYOYy545Q3/Y56 3WCIjxiI/jeKCyOH87GTtsGEio/7dMnm5kuoUquZZ//6sI2MP1uek35AA9Izskde Gi1QCOYqDa18JdXDm/2+xnVApH1eIY3ccFaRj9c689QuCf6yr0GzMuloNyEuJkMZ gIgjH6/XgEFQSAVGG6S3F3Mn6nw1bjVgTBagcagu7nUcxdtMc0wdJRxtlQJFzR9u NeJth4n+68XdfM+VQZCm7AKjdyqGtYECQ5JX/2XDP2bD2Ryma4rzR2JfoHtDekhf 7USBOHJ9OnuPfgjLG3Hj0oDkHEsRI4qCNlJVTx+LSDP4gYcNSaTF9OJtmp+QBQtH dhAMAAZTR+iqqtrc+5iwYpSBZgPaskn3N5jqXzk6sc3OYNW+khF+VSOo3M8y0une eQhL4ZYVdNenlzDZVEiIQJVnLi0dIPgQTFGv338IAHa8Ug0nvZbPdw3PtP0+LdMs d+1DJP+VvAL4+noBwm+tP3RBwPXM9/u4YSPDPtww8UcUs7OQ4wcxdybDCbnNpsZM ghuSflVOryqnMJ1rMXUJm89YgMhdsaAs8ybC8PmOdog18vGJ28lFHwHue0YQ8kep +t2UrtrtEQEvu1034XXwr2DBN8AWR/TCsrLb2k9Xlj+YEAXfZb8= =j+1l -----END PGP SIGNATURE-----