Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d5e4c2d9 by Salvatore Bonaccorso at 2026-09-30T08:05:14+02:00
Fix redict entries
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -146328,8 +146328,8 @@ CVE-2026-25589 (RedisBloom is a probabilistic data
structures module for Redis.
CVE-2026-25588 (RedisTimeSeries is a time-series module for Redis. In all
versions bef ...)
NOT-FOR-US: RedisTimeSeries Redis module
CVE-2026-25243 (Redis is an in-memory data structure store. In versions of
redis-serve ...)
- - redict <unfixed>
{DLA-4682-1}
+ - redict <unfixed>
[experimental] - redis 5:8.6.3-1
- redis 5:8.0.6-3 (bug #1147421)
[bullseye] - redis <not-affected> (Vulnerable code not present; checks
for dups introduced later)
@@ -146343,8 +146343,8 @@ CVE-2026-25243 (Redis is an in-memory data structure
store. In versions of redis
NOTE: check; ASan heap-buffer-overflow in zipmapDecodeLength() on
8.1.1+dfsg1-3+deb13u2.
NOTE: valkey fixed by:
https://github.com/valkey-io/valkey/commit/fea0b4064cf612d1c365b032326832bff0946bd9
(8.1.7)
CVE-2026-23631 (Redis is an in-memory data structure store. In all versions of
redis-s ...)
- - redict <unfixed>
{DLA-4682-1}
+ - redict <unfixed>
[experimental] - redis 5:8.6.3-1
- redis 5:8.0.6-3 (bug #1147421)
[bullseye] - redis <ignored> (Invasive to backport entire timedOut
mechanism etc.)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5e4c2d979ab77cd49dfbaf28734ab4d121dfeb7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d5e4c2d979ab77cd49dfbaf28734ab4d121dfeb7
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
