Accepting request 437057 from home:AndreasStieger:branches:server:database

redis 3.2.4 CVE-2016-8339 boo#1002351

OBS-URL: https://build.opensuse.org/request/show/437057
OBS-URL: https://build.opensuse.org/package/show/server:database/redis?expand=0&rev=85

redis-3.2.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:674e9c38472e96491b7d4f7b42c38b71b5acbca945856e209cb428fbc6135f15
-size 1541401

redis-3.2.4.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2ad042c5a6c508223adeb9c91c6b1ae091394b4026f73997281e28914c9369f1
+size 1543743

redis.changes

@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Mon Oct 24 08:39:02 UTC 2016 - astieger@suse.com
+
+- update to redis 3.2.4, including fixes for security issues:
+  * CVE-2016-8339: CONFIG SET client-output-buffer-limit Code
+                   Execution Vulnerability [boo#1002351]
+- bug fixes:
+  * TCP binding bug fixed when only certain addresses were available
+    for a given port
+  * improved crash report
+  * Fix for Redis Cluster redis-trib displaying of info after
+    creating a new cluster.
+
 -------------------------------------------------------------------
 Fri Aug  5 18:17:24 UTC 2016 - astieger@suse.com
 

redis.spec

@@ -25,7 +25,7 @@
 %bcond_with    systemd
 %endif
 Name:           redis
-Version:        3.2.3
+Version:        3.2.4
 Release:        0
 Summary:        Persistent key-value database
 License:        BSD-3-Clause
@@ -45,9 +45,9 @@ Patch2:         redis-enable-bactrace-on-x86-and-ia64-only.patch
 BuildRequires:  pkgconfig
 BuildRequires:  procps
 BuildRequires:  tcl
-Requires(pre):  shadow
 Requires:       logrotate
 Requires:       sudo
+Requires(pre):  shadow
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 %if %{with systemd}
 BuildRequires:  pkgconfig(systemd)