Release date:
2026-10-08 13:46:59 UTC
Description:
* SECURITY UPDATE: Double free in the module timer subsystem when a timer
callback stops its own currently firing timer
- debian/patches/CVE-2026-82677.patch: in moduleTimerHandler, save the
timer ID before invoking the callback and only remove and free the
timer afterwards if that ID still maps to the same timer object
- CVE-2026-82677
Updated packages:
-
redis6.2_6.2.21-1~trixie+tuxcare.els9_all.deb
sha:b99ee8b58cf81a544da143f7c75b227cc1252adb
-
redis6.2-sentinel_6.2.21-1~trixie+tuxcare.els9_amd64.deb
sha:8f4c51bfd34e2bc5b788928b0ed5a1c58f8d72fd
-
redis6.2-server_6.2.21-1~trixie+tuxcare.els9_amd64.deb
sha:1e73192f366e982df67d4030638e8c466a98e29d
-
redis6.2-tools_6.2.21-1~trixie+tuxcare.els9_amd64.deb
sha:067896b76b8bfc134d884ac106761147c57fef13
-
redis6.2-sentinel_6.2.21-1~trixie+tuxcare.els9_arm64.deb
sha:2a66b3842cee9ff4f6ce844efec2bc4a23bfbdd0
-
redis6.2-server_6.2.21-1~trixie+tuxcare.els9_arm64.deb
sha:62a179ccc8da63f42b1c165fdf898e23bbb1741a
-
redis6.2-tools_6.2.21-1~trixie+tuxcare.els9_arm64.deb
sha:b95c475a6eaca58c042096651f93216b6eb73276
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
