[CLSA-2026:1784302269] Fix CVE(s): CVE-2025-49112
Type:
security
Severity:
Low
Release date:
2026-07-17 15:31:32 UTC
Description:
* SECURITY UPDATE: Integer underflow in setDeferredReply leads to out-of-bounds write via crafted client output buffer - debian/patches/CVE-2025-49112.patch: replace the unsigned subtraction check prev->size - prev->used > 0 with prev->used < prev->size in setDeferredReply to avoid underflow when prev->used exceeds prev->size - CVE-2025-49112
CVEs fixed:
Updated packages:
  • redis6.2_6.2.21-1~trixie+tuxcare.els6_all.deb
    sha:465441142cc7a389967a41debea399f997134739
  • redis6.2-sentinel_6.2.21-1~trixie+tuxcare.els6_amd64.deb
    sha:5d5eb12d0decdf6e728311825edc56c0615e977a
  • redis6.2-server_6.2.21-1~trixie+tuxcare.els6_amd64.deb
    sha:af21c3bbc0f2bedf74fa12fe089de1acc15c23a1
  • redis6.2-tools_6.2.21-1~trixie+tuxcare.els6_amd64.deb
    sha:2c77c92ef43cf05bbd0c635312c5e259439359d9
  • redis6.2_6.2.21-1~trixie+tuxcare.els6_all.deb
    sha:465441142cc7a389967a41debea399f997134739
  • redis6.2-sentinel_6.2.21-1~trixie+tuxcare.els6_arm64.deb
    sha:a4fabe0eaee3d32176cd274cdb420ec8cf78656d
  • redis6.2-server_6.2.21-1~trixie+tuxcare.els6_arm64.deb
    sha:a1725df6d14d4093187d6ca416cfeb1cd2e6b394
  • redis6.2-tools_6.2.21-1~trixie+tuxcare.els6_arm64.deb
    sha:faaa76194224a0b1b8a05b06fae8571b9cef2bab
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.