Accepting request 989997 from home:stroeder:branches:server:database

Security update to version 7.0.4 (CVE-2022-31144)

OBS-URL: https://build.opensuse.org/request/show/989997
OBS-URL: https://build.opensuse.org/package/show/server:database/redis?expand=0&rev=203
This commit is contained in:
Danilo Spinella 2022-07-18 15:26:40 +00:00 committed by Git OBS Bridge
parent 6ab47f9b1e
commit e5646695a9
5 changed files with 13 additions and 4 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:2cde7d17214ffe305953da9fff12333e8a72caa57fd4923e4872f6362a208e73
size 2962858

3
redis-7.0.4.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:f0e65fda74c44a3dd4fa9d512d4d4d833dd0939c934e946a5c622a630d057f2f
size 2963216

View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Mon Jul 18 14:36:34 UTC 2022 - Michael Ströder <michael@stroeder.com>
- Security update to version 7.0.4
(CVE-2022-31144) A specially crafted XAUTOCLAIM command on a stream
key in a specific state may result with heap overflow, and potentially
remote code execution. The problem affects Redis versions 7.0.0 or newer.
-------------------------------------------------------------------
Mon Jul 11 15:02:24 UTC 2022 - Michael Ströder <michael@stroeder.com>

View File

@ -141,3 +141,4 @@ hash redis-7.0.0.tar.gz sha256 284d8bd1fd85d6a55a05ee4e7c31c31977ad56cbf344ed837
hash redis-7.0.1.tar.gz sha256 ca1820d527e4759884620be2917079e61e996fa81da5fbe5c07c4a7b507264dc http://download.redis.io/releases/redis-7.0.1.tar.gz
hash redis-7.0.2.tar.gz sha256 5e57eafe7d4ac5ecb6a7d64d6b61db775616dbf903293b3fcc660716dbda5eeb http://download.redis.io/releases/redis-7.0.2.tar.gz
hash redis-7.0.3.tar.gz sha256 2cde7d17214ffe305953da9fff12333e8a72caa57fd4923e4872f6362a208e73 http://download.redis.io/releases/redis-7.0.3.tar.gz
hash redis-7.0.4.tar.gz sha256 f0e65fda74c44a3dd4fa9d512d4d4d833dd0939c934e946a5c622a630d057f2f http://download.redis.io/releases/redis-7.0.4.tar.gz

View File

@ -20,7 +20,7 @@
%define _log_dir %{_localstatedir}/log/%{name}
%define _conf_dir %{_sysconfdir}/%{name}
Name: redis
Version: 7.0.3
Version: 7.0.4
Release: 0
Summary: Persistent key-value database
License: BSD-3-Clause