-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 13 May 2026 12:00:00 +0800
Source: redis
Binary: redis-sentinel redis-server redis-tools redis-tools-dbgsym
Architecture: amd64
Version: 5:8.0.2-3+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 redis-sentinel - Persistent key-value database with network interface (monitoring)
 redis-server - Persistent key-value database with network interface
 redis-tools - Persistent key-value database with network interface (client)
Changes:
 redis (5:8.0.2-3+deb13u2) trixie-security; urgency=high
 .
   * CVE-2025-67733: RESP protocol injection via Lua error_reply. A user
     could manipulate data read by a connection by injecting CR/LF
     sequences into a Redis error reply.
   * CVE-2026-21863: Remote DoS with malformed Cluster bus message. A peer
     could send a crafted PING/PONG/MEET packet whose gossip count or
     ping-extension header exceeds the received packet length, causing
     out-of-bounds reads and a server crash.
Checksums-Sha1:
 2b6d6de5f6489dfc775b65087b89432a5dd7f127 26528 redis-sentinel_8.0.2-3+deb13u2_amd64.deb
 c502f81818978156937bce72be28acac56cf8da6 66576 redis-server_8.0.2-3+deb13u2_amd64.deb
 de6f62fe5b79bd9832b17e693b800809c6f418ca 4532716 redis-tools-dbgsym_8.0.2-3+deb13u2_amd64.deb
 388de303744ddcb460f3d2c69ed9fdbb52d30820 1245324 redis-tools_8.0.2-3+deb13u2_amd64.deb
 4940e3fc6fe2c151397e5753c73b4befb8185a02 7372 redis_8.0.2-3+deb13u2_amd64-buildd.buildinfo
Checksums-Sha256:
 58f82be4ede90e7801474f76ea6f16b1139560c11ef0bb9d00985031fbd50c60 26528 redis-sentinel_8.0.2-3+deb13u2_amd64.deb
 0edc72458f66c68f2d4ccd0c9959a85a81f4ec7de410a28861cde4a2059f245c 66576 redis-server_8.0.2-3+deb13u2_amd64.deb
 d0f46011a2058b635dc1a0ec118d216994d960763381333a439d87443490604a 4532716 redis-tools-dbgsym_8.0.2-3+deb13u2_amd64.deb
 9d7cbe20963c8bfc00af3e8a3a33451bb815f7501b12e55583f9e942a767859b 1245324 redis-tools_8.0.2-3+deb13u2_amd64.deb
 0196ae70132df99ba7c909589c8bf1a44f69a50593c7272fb7d338a7bd7f6637 7372 redis_8.0.2-3+deb13u2_amd64-buildd.buildinfo
Files:
 483014d8a2179edfbf2615d3433389e3 26528 database optional redis-sentinel_8.0.2-3+deb13u2_amd64.deb
 af985b2f3ec38a941278758e11c6e6c3 66576 database optional redis-server_8.0.2-3+deb13u2_amd64.deb
 97bdde00887dec01b9e878fb8c8943a4 4532716 debug optional redis-tools-dbgsym_8.0.2-3+deb13u2_amd64.deb
 418af7c1daed42d100d1931d34664f97 1245324 database optional redis-tools_8.0.2-3+deb13u2_amd64.deb
 4ee9be80d9ee9eda13519ec73def7ed5 7372 database optional redis_8.0.2-3+deb13u2_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Ictv
-----END PGP SIGNATURE-----
