Source: redis X-Debbugs-CC: [email protected] Severity: grave Tags: security
Hi, The following vulnerability was published for redis. CVE-2026-81934[0]: | Redis contains a use-after-free vulnerability in the | 'tlsProcessPendingData()' function, which handles the TLS pending- | data list if Redis is configured with TLS support. A remote, | unauthenticated attacker may be able to execute arbitrary commands | with the privileges of the Redis server. https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834 (8.8.2) If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-81934 https://www.cve.org/CVERecord?id=CVE-2026-81934 Please adjust the affected versions in the BTS as needed.
