From c4cb657d1fcd7a6682b75f91ace7faadb235059d6a6280707879341dd9ed0552 Mon Sep 17 00:00:00 2001 From: Danilo Spinella Date: Tue, 9 Jan 2024 13:21:34 +0000 Subject: [PATCH] Accepting request 1137728 from home:darix:apps - redis 7.2.4: (boo#1218646) - Security fixes - (CVE-2023-41056) In some cases, Redis may incorrectly handle resizing of memory buffers which can result in incorrect accounting of buffer sizes and lead to heap overflow and potential remote code execution. - Bug fixes - Fix crashes of cluster commands clusters with mixed versions of 7.0 and 7.2 (#12805, #12832) - Fix slot ownership not being properly handled when deleting a slot from a node (#12564) - Fix atomicity issues with the RedisModuleEvent_Key module API event (#12733) OBS-URL: https://build.opensuse.org/request/show/1137728 OBS-URL: https://build.opensuse.org/package/show/server:database/redis?expand=0&rev=234 --- redis-7.2.3.tar.gz | 3 --- redis-7.2.4.tar.gz | 3 +++ redis.changes | 17 +++++++++++++++++ redis.hashes | 2 ++ redis.spec | 4 ++-- 5 files changed, 24 insertions(+), 5 deletions(-) delete mode 100644 redis-7.2.3.tar.gz create mode 100644 redis-7.2.4.tar.gz diff --git a/redis-7.2.3.tar.gz b/redis-7.2.3.tar.gz deleted file mode 100644 index f717f1e..0000000 --- a/redis-7.2.3.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:3e2b196d6eb4ddb9e743088bfc2915ccbb42d40f5a8a3edd8cb69c716ec34be7 -size 3384816 diff --git a/redis-7.2.4.tar.gz b/redis-7.2.4.tar.gz new file mode 100644 index 0000000..7803e54 --- /dev/null +++ b/redis-7.2.4.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:8d104c26a154b29fd67d6568b4f375212212ad41e0c2caa3d66480e78dbd3b59 +size 3386861 diff --git a/redis.changes b/redis.changes index e77cd0b..6bb2703 100644 --- a/redis.changes +++ b/redis.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Jan 9 13:02:41 UTC 2024 - Marcus Rueckert + +- redis 7.2.4: (boo#1218646) + - Security fixes + - (CVE-2023-41056) In some cases, Redis may incorrectly handle + resizing of memory buffers which can result in incorrect + accounting of buffer sizes and lead to heap overflow and + potential remote code execution. + - Bug fixes + - Fix crashes of cluster commands clusters with mixed versions + of 7.0 and 7.2 (#12805, #12832) + - Fix slot ownership not being properly handled when deleting a + slot from a node (#12564) + - Fix atomicity issues with the RedisModuleEvent_Key module API + event (#12733) + ------------------------------------------------------------------- Fri Nov 3 23:44:05 UTC 2023 - Marcus Rueckert diff --git a/redis.hashes b/redis.hashes index 0280f5b..4363654 100644 --- a/redis.hashes +++ b/redis.hashes @@ -170,3 +170,5 @@ hash redis-6.2.14.tar.gz sha256 34e74856cbd66fdb3a684fb349d93961d8c7aa668b06f81f hash redis-7.0.14.tar.gz sha256 7e1cdf347f4970ea39d5b7fdb19aedec4c21942e202de65bdeb782d38d2f299f http://download.redis.io/releases/redis-7.0.14.tar.gz hash redis-7.2.2.tar.gz sha256 ca999be08800edc6d265379c4c7aafad92f0ee400692e4e2d69829ab4b4c3d08 http://download.redis.io/releases/redis-7.2.2.tar.gz hash redis-7.2.3.tar.gz sha256 3e2b196d6eb4ddb9e743088bfc2915ccbb42d40f5a8a3edd8cb69c716ec34be7 http://download.redis.io/releases/redis-7.2.3.tar.gz +hash redis-7.0.15.tar.gz sha256 98066f5363504b26c34dd20fbcc3c957990d764cdf42576c836fc021073f4341 http://download.redis.io/releases/redis-7.0.15.tar.gz +hash redis-7.2.4.tar.gz sha256 8d104c26a154b29fd67d6568b4f375212212ad41e0c2caa3d66480e78dbd3b59 http://download.redis.io/releases/redis-7.2.4.tar.gz diff --git a/redis.spec b/redis.spec index 2cf68c1..de7c917 100644 --- a/redis.spec +++ b/redis.spec @@ -1,7 +1,7 @@ # # spec file for package redis # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,7 +20,7 @@ %define _log_dir %{_localstatedir}/log/%{name} %define _conf_dir %{_sysconfdir}/%{name} Name: redis -Version: 7.2.3 +Version: 7.2.4 Release: 0 Summary: Persistent key-value database License: BSD-3-Clause