[CLSA-2026:1788963269] redis: Fix of CVE-2026-66373
Type:
security
Severity:
Important
Release date:
2026-09-09 14:14:40 UTC
Description:
- CVE-2026-66373: reject corrupt stream RDB/RESTORE payloads in which the same global PEL NACK is claimed by more than one consumer, which led to a double free in rdbLoadObject stream consumer PEL loading
CVEs fixed:
Updated packages:
  • redis-6.2.20-1.el9_6.tuxcare.els3.x86_64.rpm
    sha:2f9bba2e5eb11ae8e4318ced74c14d5a6cf3c2ed6419e366daf49104feb764a2
  • redis-devel-6.2.20-1.el9_6.tuxcare.els3.i686.rpm
    sha:3013f534890d1d7caf9fb5b8fc7068fdffa830f3d6aad554b9261337349b4d3f
  • redis-devel-6.2.20-1.el9_6.tuxcare.els3.x86_64.rpm
    sha:d84985bb8396f11d050539b5cca78e92dcc4844431a80ccee8efff04ec664c3d
  • redis-doc-6.2.20-1.el9_6.tuxcare.els3.noarch.rpm
    sha:7f8758b9ead6aaeb4092f431b3621021f0f8afbc692bf8d91cc4ffa83a5a3f3d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.