Release date:
2026-09-10 14:08:08 UTC
Description:
* SECURITY UPDATE: Lua VM re-entry when a resync payload is processed while a
timed-out script is still on the stack
- debian/patches/0027-CVE-2026-23631.patch: return early from
readSyncBulkPayload() in src/replication.c while server.lua_timedout is
set, so rdbLoadRio() cannot reach luaCreateFunction() on the lua_State
that is paused inside the running script. Backport of upstream redis
commit 80c2b5a0a, substituting server.lua_timedout for the 7.0
isInsideYieldingLongCommand() helper. Applied as defence in depth: the
use-after-free CVE-2026-23631 describes is not reachable on 6.0.16, where
scriptingReset() is reached only via SCRIPT FLUSH and not from the resync
path.
- CVE-2026-23631
Updated packages:
-
redis_6.0.16-1+deb11u9+tuxcare.els1_all.deb
sha:9b50592ff252ed7d9512cd71b19d1c6948f5fcad
-
redis-sentinel_6.0.16-1+deb11u9+tuxcare.els1_amd64.deb
sha:a2407abbeaaec7b6cfff80dc7d1d28140e346a8a
-
redis-server_6.0.16-1+deb11u9+tuxcare.els1_amd64.deb
sha:7acc95c85e936296d83ac224cb11667e52c635a9
-
redis-tools_6.0.16-1+deb11u9+tuxcare.els1_amd64.deb
sha:7c60dd54a052a25055e5cb9200570f0de6ec2869
-
redis-sentinel_6.0.16-1+deb11u9+tuxcare.els1_arm64.deb
sha:6bbb067b7e08e63f1d92fda91cd6be293be73688
-
redis-server_6.0.16-1+deb11u9+tuxcare.els1_arm64.deb
sha:f8f59de164fe60b2d5aefed5ced686e9dffd8fcf
-
redis-tools_6.0.16-1+deb11u9+tuxcare.els1_arm64.deb
sha:217fd4efa6bfa85deaa164ca633436f77e0aecb6
-
redis-sentinel_6.0.16-1+deb11u9+tuxcare.els1_armel.deb
sha:2af287868a0b639084b606e5d10c83a9a620002e
-
redis-server_6.0.16-1+deb11u9+tuxcare.els1_armel.deb
sha:7b9bb10b12dc917f5f5e501d779d92dddd6dd345
-
redis-tools_6.0.16-1+deb11u9+tuxcare.els1_armel.deb
sha:c7c86059bdad6e0547e1db82a777e38fca4769ba
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
