[Git][security-tracker-team/security-tracker][master] Reserve DLA-4722-1 for redis

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
05c1543a by Chris Lamb at 2026-08-06T14:36:14-07:00
Reserve DLA-4722-1 for redis

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,7 @@
+[06 Aug 2026] DLA-4722-1 redis - security update
+	{CVE-2026-66373}
+	[bullseye] - redis 5:6.0.16-1+deb11u9
+	[bookworm] - redis 5:7.0.15-1~deb12u9
 [06 Aug 2026] DLA-4721-1 async-http-client - security update
 	{CVE-2026-55688}
 	[bullseye] - async-http-client 2.12.2-1+deb11u1


=====================================
data/dla-needed.txt
=====================================
@@ -768,14 +768,6 @@ rabbitmq-server/bullseye
 rails
   NOTE: 20260805: Added by Front-Desk (rouca)
 --
-redis (Chris Lamb)
-  NOTE: 20260727: Added by Front-Desk (utkarsh)
-  NOTE: 20260727: CVE-2026-66373: double free in the stream consumer PEL
-  NOTE: 20260727: loader (rdbLoadObject), reachable via RESTORE. Fixed
-  NOTE: 20260727: upstream in 6.2.23/7.2.15/8.6.5; bookworm ships
-  NOTE: 20260727: 7.0.15-1~deb12u8 and bullseye 6.0.16-1+deb11u8, both
-  NOTE: 20260727: still unguarded.
---
 request-tracker4/bullseye (Andrew Ruthven)
   NOTE: 20260529: Added by Front-Desk (dleidert)
   NOTE: 20260529: Follow DSA in preparation by maintainer (dleidert/front-desk)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05c1543ac0db4d7f986d3b174caff65896b97bd8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/05c1543ac0db4d7f986d3b174caff65896b97bd8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260806/8f67a787/attachment-0001.htm>