Accepting request 907768 from home:AndreasStieger:branches:server:database

redis 6.2.5 CVE-2021-32761 boo#1188598

OBS-URL: https://build.opensuse.org/request/show/907768
OBS-URL: https://build.opensuse.org/package/show/server:database/redis?expand=0&rev=185

redis-6.2.4.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:ba32c406a10fc2c09426e2be2787d74ff204eb3a2e496d87cff76a476b6ae16e
-size 2457940

redis-6.2.5.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4b9a75709a1b74b3785e20a6c158cab94cf52298aa381eea947a678a60d551ae
+size 2465302

redis.changes

@@ -1,3 +1,28 @@
+-------------------------------------------------------------------
+Thu Jul 22 13:44:32 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- redis 6.2.5:
+  * CVE-2021-32761: Fix integer overflow in BITFIELD on 32-bit
+    boo#1188598
+  * Change reply type for ZPOPMAX/MIN with count in RESP3 to nested 
+    array
+  * Was using a flat array like in RESP2 instead of a nested array
+    like ZRANGE does.
+  * Fix reply type for HRANDFIELD and ZRANDMEMBER when key is
+    missing
+  * Was using a null array instead of an empty array
+  * Fix reply type for ZRANGESTORE when source key is missing
+  * Was using an empty array like ZRANGE instead of 0 (used in the
+    STORE variant)
+  * redis-cli cluster import command may issue wrong MIGRATE command,
+    sending COPY instead of REPLACE (#8945)
+  * redis-cli --rdb fixes when using "-" to write to stdout
+  * redis-cli support for RESP3 set type in CSV and RAW output
+  * ad Module API for getting current command name
+  * Fix RM_StringTruncate when newlen is 0
+  * Fix CLIENT UNBLOCK crashing modules without timeout callback
+  * Further developer visible bug fixes
+
 -------------------------------------------------------------------
 Wed Jun  2 07:57:17 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
 

redis.hashes

@@ -127,3 +127,6 @@ hash redis-6.0.13.tar.gz sha256 3049763f4553ddd5a69552f41da3dd7dde9fbc524dbb15e5
 hash redis-6.2.3.tar.gz sha256 98ed7d532b5e9671f5df0825bb71f0f37483a16546364049384c63db8764512b http://download.redis.io/releases/redis-6.2.3.tar.gz
 hash redis-6.0.14.tar.gz sha256 c3e60c928b183ca9fe8e878936a6f8ba99e0441b9b6e04d2412a750ea576c649 http://download.redis.io/releases/redis-6.0.14.tar.gz
 hash redis-6.2.4.tar.gz sha256 ba32c406a10fc2c09426e2be2787d74ff204eb3a2e496d87cff76a476b6ae16e http://download.redis.io/releases/redis-6.2.4.tar.gz
+hash redis-5.0.13.tar.gz sha256 2b617aa2d6ad66c6a5d99fc8590c6b83b40d391fd1184c6eeab30df31f6a7208 http://download.redis.io/releases/redis-5.0.13.tar.gz
+hash redis-6.0.15.tar.gz sha256 4bc295264a95bc94423c162a9eee66135a24a51eefe5f53f18fc9bde5c3a9f74 http://download.redis.io/releases/redis-6.0.15.tar.gz
+hash redis-6.2.5.tar.gz sha256 4b9a75709a1b74b3785e20a6c158cab94cf52298aa381eea947a678a60d551ae http://download.redis.io/releases/redis-6.2.5.tar.gz

redis.spec

@@ -20,7 +20,7 @@
 %define _log_dir        %{_localstatedir}/log/%{name}
 %define _conf_dir       %{_sysconfdir}/%{name}
 Name:           redis
-Version:        6.2.4
+Version:        6.2.5
 Release:        0
 Summary:        Persistent key-value database
 License:        BSD-3-Clause