[CLSA-2026:1789375350] redis: Fix of CVE-2026-66373
Type:
security
Severity:
Important
Release date:
2026-09-14 08:42:39 UTC
Description:
- CVE-2026-66373: fix double free by rejecting corrupt stream RDB payloads in which one global PEL NACK is claimed by more than one consumer
CVEs fixed:
Updated packages:
  • redis-6.2.21-1.el9_2.tuxcare.els4.x86_64.rpm
    sha:4825c038ae724fb10082da46aa2b1a25dbf1b4c3c54e75f4ecfa132381cffc51
  • redis-devel-6.2.21-1.el9_2.tuxcare.els4.i686.rpm
    sha:e39b04d60ce4e3be80b07454947e0fbc9fb0879cda97c054477e82d06a529ed3
  • redis-devel-6.2.21-1.el9_2.tuxcare.els4.x86_64.rpm
    sha:e55a588e56958cb0c4cfc6633cd0a2e77492387626cca8ceda7a6194466f0439
  • redis-doc-6.2.21-1.el9_2.tuxcare.els4.noarch.rpm
    sha:b523811cc8ca05e1de10f97471d0581c2a2671750e2274296e6bbd6ea7eea1b0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.