-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 24 Sep 2026 13:34:16 -0700 Source: redis Architecture: source Version: 5:7.0.15-1~deb12u10 Distribution: bookworm-security Urgency: high Maintainer: Chris Lamb <lamby@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Closes: 1147423 1148265 Changes: redis (5:7.0.15-1~deb12u10) bookworm-security; urgency=high . * Non-maintainer upload by the Debian LTS team. * CVE-2026-81934: Prevent a use-after-free vulnerability in the handling of pending TLS data. A remote, unauthenticated attacker may be been able to execute arbitrary commands with the privileges of the Redis server. (Closes: #1147423) * CVE-2026-92925: Prevent an out-of-bounds vulnerability in the handling of cluster ping extensions. This could have allowed a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. (Closes: #1148265) Checksums-Sha1: f8751617e24199b21dd5ae82320cb3960ac60438 2309 redis_7.0.15-1~deb12u10.dsc b5d51660215a5402d146b8ec045ae712a14783de 3025940 redis_7.0.15.orig.tar.gz bd95ef0cf3e5a1971bcc0d8250c98e193a085ccf 52200 redis_7.0.15-1~deb12u10.debian.tar.xz c9ac03454020b6941e483f4d9504d8e83fd194f5 5680 redis_7.0.15-1~deb12u10_source.buildinfo Checksums-Sha256: 6416560d9f6e692a524867d8a437d97c9310c374a70d0bac1fee9259bf5e9463 2309 redis_7.0.15-1~deb12u10.dsc 4b1dc4ee6d622a09fff9c6777191209750fb5e5a725ef78ea012d6eef4c22982 3025940 redis_7.0.15.orig.tar.gz 77d8423c427657bb2f5b635f51184e8064a51c93fcbd7519146da587a8361bbc 52200 redis_7.0.15-1~deb12u10.debian.tar.xz c07346b4fe4b8d2a05f21f906081947f4a8b6469b79e53b4bd61a3e3f3cd03c7 5680 redis_7.0.15-1~deb12u10_source.buildinfo Files: 27fde2a451308b180f84661d982537e8 2309 database optional redis_7.0.15-1~deb12u10.dsc d4572b9ddf01b3aeeb43859119ad62f9 3025940 database optional redis_7.0.15.orig.tar.gz e57ad215d90a86fe9d9e1b684961f6b0 52200 database optional redis_7.0.15-1~deb12u10.debian.tar.xz dcc2b975e01741268140583e31fabeb7 5680 database optional redis_7.0.15-1~deb12u10_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmq1pDMACgkQHpU+J9Qx HliZQw/+Ohfpfnfc1akfNB5EzauUi853JJMoLTa83GjbsKmIwv29JJRLYurZmJuw Rg5KSP/GXJzeQvOM717rR0sVZnJzfMFQemV1JyWfY5huzZsiVuXIAa4m5gNXeJEH 3O3qJhpOT/Mcu0lwkPaiiwLBEQeMvy9Pex0rdQcWOLKerlfMZM+xKeBkhu4uN+yl nshS7lRHygC0U8AxSoh8OVLLPWyOFai7WbeCxkOpdKz0dUlirwthwFY+KhlJnFTp F3Ni2NWxVilQQGJCGJhivgWEih5UZmgdCYWZMRIBSjm5kMpoNQhq2eUoI562ktCz ZHEsQhSJePuBGxJ7SmUUvEomMqJ2LDqq5QNufGEpwwYx0nDy9P8bSmA3qDgz8dcH KBM/X84bXyGfhmRJzHs5OeBBEeOav4q2XHUozOmZsGS+IyDWoYfWhzhfEb1le08e UaLVQzt+T2VgvZ/qKi9ZR/I1cv2YdpnDRLziRv6QohJ0bLyB8FeSl8Jx8pJirC8z dDq2whS2BnW3NqAgpaHorI7UHi/qi/kkmasru5C4bBRwri74CM53NHBs76yihSnt qgnraYfVewJM3r50YgtlfUQzy/fN3+kQ0CaaoL00mW01LUp8hhiWOK/hht0vN6CR 9JIn9NdI70UnzMplqKsvBngI0KdVdC8fy3VlYNlsRvH9NmpV4gg= =k9ul -----END PGP SIGNATURE-----
