UbuntuUpdates.org

Package "redis"

Name: redis

Description:

Persistent key-value database with network interface (metapackage)
Latest version: 5:8.0.5-1ubuntu0.1
Release: resolute (26.04)
Level: updates
Repository: universe
Homepage: https://redis.io/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "redis"

All arch deb package
APT INSTALL

Other versions of "redis" in Resolute

Repository Area Version
base universe 5:8.0.5-1
security universe 5:8.0.5-1ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 5:8.0.5-1ubuntu0.1 2026-10-07 15:39:34 UTC

redis (5:8.0.5-1ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Use-after-free vulnerability in tlsProcessPendingData()
    - debian/patches/CVE-2026-81934.patch: Fix use-after-free in
      tlsProcessPendingData() pending-list iteration (#1391) in src/tls.c.
    - CVE-2026-81934
  * SECURITY UPDATE: Potential out-of-bounds read and denial of service
    vulnerability due to missing null-terminator check
    - debian/patches/CVE-2026-92925.patch: Reject cluster bus PING
      extensions with missing null terminator (#15263) in src/cluster_legacy.c,
      tests/unit/cluster/hostnames.tcl.
    - CVE-2026-92925

 -- Hurman Thu, 01 Oct 2026 14:17:55 +0800
CVE-2026-81934 Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configur
CVE-2026-92925 A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate


About   -   Send Feedback to @ubuntu_updates