[CLSA-2026:1786713231] Fix CVE(s): CVE-2026-66373
Type:
security
Severity:
Important
Release date:
2026-08-14 13:14:02 UTC
Description:
* SECURITY UPDATE: Double free via a crafted RESTORE payload in which the same stream NACK is referenced by more than one consumer - debian/patches/CVE-2026-66373.patch: reject the payload in rdbLoadObject when a consumer PEL entry references a NACK that already has a consumer assigned - CVE-2026-66373
CVEs fixed:
Updated packages:
  • redis6.2_6.2.21-1~trixie+tuxcare.els7_all.deb
    sha:e996fb36b1240abde00221aae5a969640def3cf6
  • redis6.2-sentinel_6.2.21-1~trixie+tuxcare.els7_amd64.deb
    sha:badf60b688044aa73b37bfcb98017b1be6d66ee3
  • redis6.2-server_6.2.21-1~trixie+tuxcare.els7_amd64.deb
    sha:aa7f9ae8efaa699926a979967c50373b00dac963
  • redis6.2-tools_6.2.21-1~trixie+tuxcare.els7_amd64.deb
    sha:fb6d15f3b15ac3b090497d258fa59ce1a0777ae4
  • redis6.2_6.2.21-1~trixie+tuxcare.els7_all.deb
    sha:e996fb36b1240abde00221aae5a969640def3cf6
  • redis6.2-sentinel_6.2.21-1~trixie+tuxcare.els7_arm64.deb
    sha:7c752929f01d901eeb19c3282c6d2c6587fa07f0
  • redis6.2-server_6.2.21-1~trixie+tuxcare.els7_arm64.deb
    sha:d1525a67e989f5167ada6da90aa975c7a33b4914
  • redis6.2-tools_6.2.21-1~trixie+tuxcare.els7_arm64.deb
    sha:60f86450f9c57a42e5a6b06a6dadc71743cd1696
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.