Release date:
2026-07-17 15:31:32 UTC
Description:
* SECURITY UPDATE: Integer underflow in setDeferredReply leads to
out-of-bounds write via crafted client output buffer
- debian/patches/CVE-2025-49112.patch: replace the unsigned subtraction
check prev->size - prev->used > 0 with prev->used < prev->size in
setDeferredReply to avoid underflow when prev->used exceeds prev->size
- CVE-2025-49112
Updated packages:
-
redis6.2_6.2.21-1~trixie+tuxcare.els6_all.deb
sha:465441142cc7a389967a41debea399f997134739
-
redis6.2-sentinel_6.2.21-1~trixie+tuxcare.els6_amd64.deb
sha:5d5eb12d0decdf6e728311825edc56c0615e977a
-
redis6.2-server_6.2.21-1~trixie+tuxcare.els6_amd64.deb
sha:af21c3bbc0f2bedf74fa12fe089de1acc15c23a1
-
redis6.2-tools_6.2.21-1~trixie+tuxcare.els6_amd64.deb
sha:2c77c92ef43cf05bbd0c635312c5e259439359d9
-
redis6.2_6.2.21-1~trixie+tuxcare.els6_all.deb
sha:465441142cc7a389967a41debea399f997134739
-
redis6.2-sentinel_6.2.21-1~trixie+tuxcare.els6_arm64.deb
sha:a4fabe0eaee3d32176cd274cdb420ec8cf78656d
-
redis6.2-server_6.2.21-1~trixie+tuxcare.els6_arm64.deb
sha:a1725df6d14d4093187d6ca416cfeb1cd2e6b394
-
redis6.2-tools_6.2.21-1~trixie+tuxcare.els6_arm64.deb
sha:faaa76194224a0b1b8a05b06fae8571b9cef2bab
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.