-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 13 May 2026 11:17:08 -0700 Source: redis Built-For-Profiles: nocheck Architecture: source Version: 5:8.6.3-1 Distribution: experimental Urgency: high Maintainer: Chris Lamb <[email protected]> Changed-By: Chris Lamb <[email protected]> Changes: redis (5:8.6.3-1) experimental; urgency=high . * New upstream security release: . - CVE-2026-23479: Use-After-Free in unblock client flow may lead to Remote Code Execution. - CVE-2026-25243: Invalid memory access in RESTORE may lead to Remote Code Execution. - CVE-2026-23631: Lua Use-After-Free may lead to remote code execution. - CVE-2026-25588: Invalid memory access in RESTORE may lead to Remote Code Execution (Time Series). - CVE-2026-25589: Invalid memory access in RESTORE may lead to Remote Code Execution (Probabilistic). . Full release notes: <https://github.com/redis/redis/releases/tag/8.6.3> * Bump Standards-Version to 4.7.4. Checksums-Sha1: 79ff18a78ed773e0c94f8000ec98bff446fe65be 2228 redis_8.6.3-1.dsc 6187b6b0e62284c4d8109cd133cd5b4c2082aeb0 4303046 redis_8.6.3.orig.tar.gz 61355c41527bba58bfc1e04c0d47577a05a1741a 30540 redis_8.6.3-1.debian.tar.xz 0dc6820bc90c7972668d4e4ab936847218513f94 7277 redis_8.6.3-1_amd64.buildinfo Checksums-Sha256: 78ffcf052d82ae1ae9ef8fccc7af638e407e536d2604886fd0cc75f770bc1d33 2228 redis_8.6.3-1.dsc 58d0d1eb49a1ea6c2179659707fec171b1e2e2b8d5157ed2ec59d1d66ad5a654 4303046 redis_8.6.3.orig.tar.gz 9630f94c5fd0dd15ba7c2b31c32f364b09246a591d3a12bea55355c780d9e590 30540 redis_8.6.3-1.debian.tar.xz 355867daef7738541890fe8f6573b76264150a28b1fe074f45dd97f27960a84b 7277 redis_8.6.3-1_amd64.buildinfo Files: 924eb2d80db30451a71d8c29fc2a8d72 2228 database optional redis_8.6.3-1.dsc 93ac83a5b8c1e0570270e1d960278fca 4303046 database optional redis_8.6.3.orig.tar.gz bb1db6d13e47ef8b0698b3434218f53a 30540 database optional redis_8.6.3-1.debian.tar.xz 999b75a6f52d5fef4ba648aa7473bfa0 7277 database optional redis_8.6.3-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAmoEwMUACgkQHpU+J9Qx Hlh4XxAAivCz9oTLshcDlUICp3TXYgqR6Q+CkHZWnGVNb23yGxZ/LxllajBB8BI2 /JtqPfAkQcm+hzLHTOosrPFfvbQAUyUfwRu8N/LrSb4YiZq9WB4tUTXb17blUSmQ BFZnZES4kQSP3uumyaZSogCvTmXNDtflRrg4HFZ+j15j1Jxx9/Ug+DnwHN6elzFP Hu5LA767Ftzbr0S6i1g9Z7v4DTcC3gc7mUXuG76V+h+llBDhTIf1pj65qmX8Tgty mJ+8jZpf/MGQmMQzVWIVjSSziVelxn7k8+W7N7ixBLnQBxbhsqb9uYcaTKdbe0oj 5SclGhOOwEwXhESGjfc2WgeFyfJCc0JWfjs0XwPCk3lmUbj2UeXLde2dto3GU9IT 1fnGuWhKt2CGM6nWifA5hnXp5qiE2mmmKVLAeUYz5f8+MpfXLJhVITpEUZRAi7PR fXcA7rCrR0FCDaJkLyU5eRY5/KEkddza43+G6LleE8Qd2BFMuEfqkoDdBgEFrvFl 1HKpi//z5BcGN7Be52XZJ5JMXVnltIBByQNXIdORD4kakwSRpWZdQOrKs03N0WdQ U5IMa09z1OEKqxUK4AEgOYWxwg6grDrkoAxg+HURk7Fbu94tt5kkieGAmB/UE294 UsuOzZxVczQsJ1BYe4p6QPxVU26cSIfYeg2q30LHNEpr26V2SW0= =BIN7 -----END PGP SIGNATURE-----
pgplsjC8Xdg5B.pgp
Description: PGP signature
