Accepting request 874857 from home:AndreasStieger:branches:server:database

redis 6.0.11 CVE-2021-21309 boo#1182657

OBS-URL: https://build.opensuse.org/request/show/874857
OBS-URL: https://build.opensuse.org/package/show/server:database/redis?expand=0&rev=164

redis-6.0.10.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:79bbb894f9dceb33ca699ee3ca4a4e1228be7fb5547aeb2f99d921e86c1285bd
-size 2271970

redis-6.0.11.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c927f2d110e88fda308526a1809a4d7dfcd004319f0de66d40a58a42aec23c5f
+size 2276154

redis.changes

@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Wed Feb 24 12:10:22 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- redis 6.0.11:
+  * CVE-2021-21309: Avoid 32-bit overflows when proto-max-bulk-len
+    is set high (boo#1182657)
+  * Fix handling of threaded IO and CLIENT PAUSE (failover), could
+    lead to data loss or a crash
+  * Fix the selection of a random element from large hash tables
+  * Fix broken protocol in client tracking tracking-redir-broken message
+  * XINFO able to access expired keys on a replica
+  * Fix broken protocol in redis-benchmark when used with -a or
+    --dbnum 
+  * Avoid assertions (on older kernels) when testing arm64 CoW bug
+  * CONFIG REWRITE should honor umask settings
+  * Fix firstkey,lastkey,step in COMMAND command for some commands
+  * RM_ZsetRem: Delete key if empty, the bug could leave empty
+    zset keys 
+
 -------------------------------------------------------------------
 Fri Feb 12 23:30:08 UTC 2021 - Jan Zerebecki <jzerebecki@suse.com>
 

redis.hashes

@@ -112,4 +112,10 @@ hash redis-6.0.7.tar.gz sha256 c2aaa1a4c7e72c70adedf976fdd5e1d34d395989283dab9d7
 hash redis-6.0.8.tar.gz sha256 04fa1fddc39bd1aecb6739dd5dd73858a3515b427acd1e2947a66dadce868d68 http://download.redis.io/releases/redis-6.0.8.tar.gz
 hash redis-5.0.10.tar.gz sha256 e30a5e7d1593a715cdda2a82deb90190816d06c9d1dc1ef5b36874878c683382 http://download.redis.io/releases/redis-5.0.10.tar.gz
 hash redis-6.0.9.tar.gz sha256 dc2bdcf81c620e9f09cfd12e85d3bc631c897b2db7a55218fd8a65eaa37f86dd http://download.redis.io/releases/redis-6.0.9.tar.gz
-hash redis-6.0.10.tar.gz sha256 79bbb894f9dceb33ca699ee3ca4a4e1228be7fb5547aeb2f99d921e86c1285bd https://download.redis.io/releases/redis-6.0.10.tar.gz
+hash redis-6.2-rc1.tar.gz sha256 92fc13f57b31cb6425c590b9c6b0bf611450f66b18fe92b9d5893b3a9760c438 http://download.redis.io/releases/redis-6.2-rc1.tar.gz
+hash redis-6.0.10.tar.gz sha256 79bbb894f9dceb33ca699ee3ca4a4e1228be7fb5547aeb2f99d921e86c1285bd http://download.redis.io/releases/redis-6.0.10.tar.gz
+hash redis-6.2-rc2.tar.gz sha256 7153bbbd751f61ea70e649e0d19be6e7e78da9864527d46d10519e9a03cb0924 http://download.redis.io/releases/redis-6.2-rc2.tar.gz
+hash redis-6.2-rc3.tar.gz sha256 f35bba2af553fb58b2068ee581f316cefe0c00041e48fc944bd962e65777851c http://download.redis.io/releases/redis-6.2-rc3.tar.gz
+hash redis-5.0.11.tar.gz sha256 418135c453a94aac24c24243b041fb978fcc3ea4e1e1f996c1d64b16ae6ac1aa http://download.redis.io/releases/redis-5.0.11.tar.gz
+hash redis-6.2.0.tar.gz sha256 67d624c25d962bd68aff8812a135df85bad07556b8825f3bcd5b522a9932dbca http://download.redis.io/releases/redis-6.2.0.tar.gz
+hash redis-6.0.11.tar.gz sha256 c927f2d110e88fda308526a1809a4d7dfcd004319f0de66d40a58a42aec23c5f http://download.redis.io/releases/redis-6.0.11.tar.gz

redis.spec

@@ -20,7 +20,7 @@
 %define _log_dir        %{_localstatedir}/log/%{name}
 %define _conf_dir       %{_sysconfdir}/%{name}
 Name:           redis
-Version:        6.0.10
+Version:        6.0.11
 Release:        0
 Summary:        Persistent key-value database
 License:        BSD-3-Clause