From 5aa06ad7503021442e25732b51f8bbc08f0389ee633ebc69c2b4db23855c0148 Mon Sep 17 00:00:00 2001 From: Danilo Spinella Date: Thu, 7 Sep 2023 15:05:44 +0000 Subject: [PATCH] Accepting request 1109571 from home:dspinella:branches:server:database - redis 7.2.1: * (CVE-2023-41053) Redis does not correctly identify keys accessed by SORT_RO and, as a result, may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. (bsc#1215094) * Fix crashes when joining a node to an existing 7.0 Redis Cluster * Correct request_policy and response_policy command tips on for some admin / configuration commands - Refresh redis.hashes OBS-URL: https://build.opensuse.org/request/show/1109571 OBS-URL: https://build.opensuse.org/package/show/server:database/redis?expand=0&rev=229 --- redis-7.2.0.tar.gz | 3 --- redis-7.2.1.tar.gz | 3 +++ redis.changes | 12 ++++++++++++ redis.hashes | 2 ++ redis.spec | 2 +- 5 files changed, 18 insertions(+), 4 deletions(-) delete mode 100644 redis-7.2.0.tar.gz create mode 100644 redis-7.2.1.tar.gz diff --git a/redis-7.2.0.tar.gz b/redis-7.2.0.tar.gz deleted file mode 100644 index 618b12c..0000000 --- a/redis-7.2.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:8b12e242647635b419a0e1833eda02b65bf64e39eb9e509d9db4888fb3124943 -size 3381269 diff --git a/redis-7.2.1.tar.gz b/redis-7.2.1.tar.gz new file mode 100644 index 0000000..8e02c65 --- /dev/null +++ b/redis-7.2.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5c76d990a1b1c5f949bcd1eed90d0c8a4f70369bdbdcb40288c561ddf88967a4 +size 3383319 diff --git a/redis.changes b/redis.changes index 7d66327..40a7501 100644 --- a/redis.changes +++ b/redis.changes @@ -1,3 +1,15 @@ +------------------------------------------------------------------- +Thu Sep 7 14:31:26 UTC 2023 - Danilo Spinella + +- redis 7.2.1: + * (CVE-2023-41053) Redis does not correctly identify keys accessed by SORT_RO and, + as a result, may grant users executing this command access to keys that are not + explicitly authorized by the ACL configuration. (bsc#1215094) + * Fix crashes when joining a node to an existing 7.0 Redis Cluster + * Correct request_policy and response_policy command tips on for some admin / + configuration commands +- Refresh redis.hashes + ------------------------------------------------------------------- Tue Aug 15 11:28:07 UTC 2023 - Marcus Rueckert diff --git a/redis.hashes b/redis.hashes index 9988ba4..bd6ecd6 100644 --- a/redis.hashes +++ b/redis.hashes @@ -164,3 +164,5 @@ hash redis-6.2.13.tar.gz sha256 89ff27c80d420456a721ccfb3beb7cc628d883c530598035 hash redis-7.0.12.tar.gz sha256 9dd83d5b278bb2bf0e39bfeb75c3e8170024edbaf11ba13b7037b2945cf48ab7 http://download.redis.io/releases/redis-7.0.12.tar.gz hash redis-7.2-rc3.tar.gz sha256 4035e2b146ca1eb43b4188ca30a6d7be1a4d40ac2dfdf58db8f885517bbab41a http://download.redis.io/releases/redis-7.2-rc3.tar.gz hash redis-7.2.0.tar.gz sha256 8b12e242647635b419a0e1833eda02b65bf64e39eb9e509d9db4888fb3124943 http://download.redis.io/releases/redis-7.2.0.tar.gz +hash redis-7.0.13.tar.gz sha256 97065774d5fb8388eb0d8913458decfcb167d356e40d31dd01cd30c1cc391673 http://download.redis.io/releases/redis-7.0.13.tar.gz +hash redis-7.2.1.tar.gz sha256 5c76d990a1b1c5f949bcd1eed90d0c8a4f70369bdbdcb40288c561ddf88967a4 http://download.redis.io/releases/redis-7.2.1.tar.gz diff --git a/redis.spec b/redis.spec index 22b5421..2dee06f 100644 --- a/redis.spec +++ b/redis.spec @@ -20,7 +20,7 @@ %define _log_dir %{_localstatedir}/log/%{name} %define _conf_dir %{_sysconfdir}/%{name} Name: redis -Version: 7.2.0 +Version: 7.2.1 Release: 0 Summary: Persistent key-value database License: BSD-3-Clause