redis (5:8.6.3-1) [PTS] [DDPO]

COMMITS: VCS has seen 1 commit since the debian/5%8.6.3-1 tag

Git: https://salsa.debian.org/lamby/pkg-redis.git -b debian/experimental
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: debian/experimental
Path: debian/changelog
Repo size: 8138752
Browser: https://salsa.debian.org/lamby/pkg-redis
Last scan: 2026-07-14 12:43:24+00
Next scan: 2026-07-22 05:04:00+00
Merge requests: 4
CI pipeline status: failed

Debian changelog in Git:

redis (5:8.6.3-1) experimental; urgency=high

  * New upstream security release:

    - CVE-2026-23479: Use-After-Free in unblock client flow may lead to Remote
      Code Execution.
    - CVE-2026-25243: Invalid memory access in RESTORE may lead to Remote Code
      Execution.
    - CVE-2026-23631: Lua Use-After-Free may lead to remote code execution.
    - CVE-2026-25588: Invalid memory access in RESTORE may lead to Remote Code
      Execution (Time Series).
    - CVE-2026-25589: Invalid memory access in RESTORE may lead to Remote Code
      Execution (Probabilistic).

    Full release notes: <https://github.com/redis/redis/releases/tag/8.6.3>
  * Bump Standards-Version to 4.7.4.

 -- Chris Lamb <lamby@debian.org>  Wed, 13 May 2026 11:17:08 -0700

This branch is 1 commit ahead of tag debian/5%8.6.3-1

Git log:

commit 2e75ae1b77107c1dcdf47da2092a32eeb36d868f
Author: Chris Lamb <lamby@debian.org>
Date:   Wed May 13 13:46:29 2026 -0700

    Also specify CPPFLAGS in tests/modules/Makefile and deps/fast_float/Makefile.