Hi Chris, On Thu, Jul 10, 2025 at 11:59:31AM -0700, Chris Lamb wrote: > Hello Security Team, > > Would you be interested in a bullseye update for redis in order to > address the two latest CVEs? > > That would be: > > * CVE-2025-32023 (#1108975) > * CVE-2025-48367 (#1108981) > > I'm preparing parallel updates for buster, stretch and buster, as well > as an update for unstable (#1108985)
I guess you mean bookworm here ;-). Can you please preapre debdiff and send them for review to the security-team alias. Can you as well include fixes for the no-dsa taggend CVEs which have upstream fixes already? Regards, Salvatore
