Release date:
2026-10-08 13:51:33 UTC
Description:
* SECURITY UPDATE: Double free in the module timer subsystem when a timer
callback stops its own currently firing timer
- debian/patches/CVE-2026-82677.patch: in moduleTimerHandler, save the
timer ID before invoking the callback and only remove and free the
timer afterwards if that ID still maps to the same timer object
- CVE-2026-82677
Updated packages:
-
redis6.2_6.2.21-1~bookworm+tuxcare.els9_all.deb
sha:67c697af834fdacece19dd19b01de3314182a64a
-
redis6.2-sentinel_6.2.21-1~bookworm+tuxcare.els9_amd64.deb
sha:0d68d4f940a1ce705ffc3148847a116c335c37b0
-
redis6.2-server_6.2.21-1~bookworm+tuxcare.els9_amd64.deb
sha:bef3439d3e8e73aa59dd4983b8fb8de6ece546d2
-
redis6.2-tools_6.2.21-1~bookworm+tuxcare.els9_amd64.deb
sha:3cf5a77508544f0507bb61f880efdd968a0d94ea
-
redis6.2-sentinel_6.2.21-1~bookworm+tuxcare.els9_arm64.deb
sha:35759681bcbdb2444cde4fcc48abb18188b81e18
-
redis6.2-server_6.2.21-1~bookworm+tuxcare.els9_arm64.deb
sha:d28754f520c6cbba7667ee53f90f30b3bb3f8c14
-
redis6.2-tools_6.2.21-1~bookworm+tuxcare.els9_arm64.deb
sha:b225a7ef7d271396f35a0983e2a0a03580c49d7b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
