Fix CVE(s): CVE-2025-21605, CVE-2025-48367, CVE-2026-66373

{
  "id": "781fd09aa6d283e7e456c6e4635506509fa5daf9af5d413f87b101eb185b1444",
  "url": "https://osv.dev/vulnerability/CLSA-2026-1788372462",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Fix CVE(s): CVE-2025-21605, CVE-2025-48367, CVE-2026-66373",
    "summary": "* SECURITY UPDATE: Memory exhaustion via unauthenticated client output buffer - debian/patches/0016-CVE-2025-21605.patch: cap the output buffer of unauthenticated clients in checkClientOutputBufferLimits() in src/networking.c, so a client that never reads its NOAUTH replies cannot grow the buffer without bound. Backport of upstream redis commit 5e93f9cb9 (6.2.18) as shipped by Debian for bullseye in 5:6.0.16-1+deb11u9 (DLA-4162-1), adapted to 5.0 by spelling the condition as server.requirepass && !c->authenticated, since 5.0 predates the ACL subsystem and has no authRequired() helper. - CVE-2025-21605 * SECURITY UPDATE: Client starvation via repeated accept() errors - debian/patches/0017-CVE-2025-48367.patch: add anetAcceptFailureNeedsRetry() to src/anet.c and retry the accept loop in acceptTcpHandler()/acceptUnixHandler() in src/networking.c and clusterAcceptHandler() in src/cluster.c, so a connection that fails at accept() time no longer aborts the whole batch and starves other pending clients. Backport of upstream redis commit 0fe674359 (6.2.19) as shipped by Debian for bullseye in 5:6.0.16-1+deb11u9 (DLA-4240-1); the acceptTLSHandler() hunk is dropped because 5.0 has no TLS support. - CVE-2025-48367 * SECURITY UPDATE: Double free via stream RDB payload with a shared NACK - debian/patches/0018-CVE-2026-66373.patch: reject a stream payload whose consumer PELs reference the same global-PEL NACK twice, in rdbLoadObject() in src/rdb.c, so RESTORE can no longer build two consum",
    "evidence": "osv:CLSA-2026-1788372462",
    "products": [
      {
        "name": {
          "value": "redis",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5:5.0.14-1+deb10u5+tuxcare.els4",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "redis-sentinel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5:5.0.14-1+deb10u5+tuxcare.els4",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "redis-server",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5:5.0.14-1+deb10u5+tuxcare.els4",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "redis-tools",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5:5.0.14-1+deb10u5+tuxcare.els4",
            "evidence": "/affected/3/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CLSA-2026-1788372462",
      "aliases": [
        "CLSA-2026-1788372462"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5:5.0.14-1+deb10u5+tuxcare.els4"
                }
              ]
            }
          ],
          "package": {
            "name": "redis",
            "purl": "pkg:deb/tuxcare/redis?distro=debian-10",
            "ecosystem": "TuxCare:Debian:10"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788372462.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5:5.0.14-1+deb10u5+tuxcare.els4"
                }
              ]
            }
          ],
          "package": {
            "name": "redis-sentinel",
            "purl": "pkg:deb/tuxcare/redis-sentinel?distro=debian-10",
            "ecosystem": "TuxCare:Debian:10"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788372462.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5:5.0.14-1+deb10u5+tuxcare.els4"
                }
              ]
            }
          ],
          "package": {
            "name": "redis-server",
            "purl": "pkg:deb/tuxcare/redis-server?distro=debian-10",
            "ecosystem": "TuxCare:Debian:10"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788372462.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5:5.0.14-1+deb10u5+tuxcare.els4"
                }
              ]
            }
          ],
          "package": {
            "name": "redis-tools",
            "purl": "pkg:deb/tuxcare/redis-tools?distro=debian-10",
            "ecosystem": "TuxCare:Debian:10"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788372462.json"
          }
        }
      ],
      "modified": "2026-10-26T09:43:18.682215829Z",
      "provider": "osv",
      "upstream": [
        "CVE-2025-21605",
        "CVE-2025-48367",
        "CVE-2026-25243",
        "CVE-2026-66373"
      ],
      "references": [
        "https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1788372462.html",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-21605",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-48367",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-66373"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2025-21605",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-48367",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-25243",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-66373",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 449824,
  "published_at": "2026-09-02T18:07:54+00:00"
}