Release date:
2026-10-26 16:48:23 UTC
Description:
* SECURITY UPDATE: Lua use-after-free on SCRIPT FLUSH
- debian/patches/0019-CVE-2024-46981.patch: force a full Lua garbage
collection with lua_gc(server.lua, LUA_GCCOLLECT, 0) before
lua_close() in scriptingRelease() in src/scripting.c, so user data
is no longer freed while destructor callbacks may still use it.
Backport of upstream redis commit ca0a9ab82 (6.2.17); our
scriptingRelease() takes no async argument, so only the added
lua_gc() line is carried
- CVE-2024-46981
Updated packages:
-
redis_5.0.14-1+deb10u5+tuxcare.els5_all.deb
sha:02bbc09740077f54d34f14ca24d39d13b392238a
-
redis-sentinel_5.0.14-1+deb10u5+tuxcare.els5_amd64.deb
sha:cf5ecc41b25450c930282fe96ca329a84da786ca
-
redis-server_5.0.14-1+deb10u5+tuxcare.els5_amd64.deb
sha:81738cb95ed0c17d065a4ca55a5f1f3e371df3db
-
redis-tools_5.0.14-1+deb10u5+tuxcare.els5_amd64.deb
sha:dffd19ad9ee678bee37f03827f1d27f625360f62
-
redis-sentinel_5.0.14-1+deb10u5+tuxcare.els5_arm64.deb
sha:63883daaea6e93d47eaa0f1df4d27a4d7fa8b017
-
redis-server_5.0.14-1+deb10u5+tuxcare.els5_arm64.deb
sha:7668a3a5ea969db86f8b59242753f873fccf04c6
-
redis-tools_5.0.14-1+deb10u5+tuxcare.els5_arm64.deb
sha:7d553676d74f6e68203370472d40a114e7b45ea6
-
redis-sentinel_5.0.14-1+deb10u5+tuxcare.els5_armel.deb
sha:0323d96f96bb40b9fbe16147f50c86198f58217c
-
redis-server_5.0.14-1+deb10u5+tuxcare.els5_armel.deb
sha:a854e55dd6e3ceb5f112cf028681a94b375d6c10
-
redis-tools_5.0.14-1+deb10u5+tuxcare.els5_armel.deb
sha:2bfd4b9826b5378e3f932bfc5740094a742f0635
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
