-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 13 May 2026 12:00:00 +0800
Source: redis
Binary: redis
Architecture: all
Version: 5:8.0.2-3+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 redis      - Persistent key-value database with network interface (metapackage
Changes:
 redis (5:8.0.2-3+deb13u2) trixie-security; urgency=high
 .
   * CVE-2025-67733: RESP protocol injection via Lua error_reply. A user
     could manipulate data read by a connection by injecting CR/LF
     sequences into a Redis error reply.
   * CVE-2026-21863: Remote DoS with malformed Cluster bus message. A peer
     could send a crafted PING/PONG/MEET packet whose gossip count or
     ping-extension header exceeds the received packet length, causing
     out-of-bounds reads and a server crash.
Checksums-Sha1:
 9c976022b55b15d3c99c7dcf8582c06635e79a7e 6426 redis_8.0.2-3+deb13u2_all-buildd.buildinfo
 fc7561834331644bf79b00120ff4483ba8f3a111 17276 redis_8.0.2-3+deb13u2_all.deb
Checksums-Sha256:
 9a20b37add086ccab61793e88aced88b75641f217d7b088fc9ac4f9e29a06096 6426 redis_8.0.2-3+deb13u2_all-buildd.buildinfo
 66912e070a21fd339d154abd5b5ca22a9dd8b58ce5a4fda0925b69f1b7ac78de 17276 redis_8.0.2-3+deb13u2_all.deb
Files:
 2f3952546212c09dc1cf87f7022bc1bc 6426 database optional redis_8.0.2-3+deb13u2_all-buildd.buildinfo
 9cfaadd52677cee5ca48973b17035d7e 17276 database optional redis_8.0.2-3+deb13u2_all.deb

-----BEGIN PGP SIGNATURE-----
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=8xBt
-----END PGP SIGNATURE-----