Accepting request 1137732 from server:database

OBS-URL: https://build.opensuse.org/request/show/1137732
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/redis?expand=0&rev=93

redis-7.2.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3e2b196d6eb4ddb9e743088bfc2915ccbb42d40f5a8a3edd8cb69c716ec34be7
-size 3384816

redis.changes

@@ -1,3 +1,20 @@
+-------------------------------------------------------------------
+Tue Jan  9 13:02:41 UTC 2024 - Marcus Rueckert <mrueckert@suse.de>
+
+- redis 7.2.4: (boo#1218646)
+  - Security fixes
+    - (CVE-2023-41056) In some cases, Redis may incorrectly handle
+      resizing of memory buffers which can result in incorrect
+      accounting of buffer sizes and lead to heap overflow and
+      potential remote code execution.
+  - Bug fixes
+    - Fix crashes of cluster commands clusters with mixed versions
+      of 7.0 and 7.2 (#12805, #12832)
+    - Fix slot ownership not being properly handled when deleting a
+      slot from a node (#12564)
+    - Fix atomicity issues with the RedisModuleEvent_Key module API
+      event (#12733)
+
 -------------------------------------------------------------------
 Fri Nov  3 23:44:05 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
 

redis.hashes

@@ -170,3 +170,5 @@ hash redis-6.2.14.tar.gz sha256 34e74856cbd66fdb3a684fb349d93961d8c7aa668b06f81f
 hash redis-7.0.14.tar.gz sha256 7e1cdf347f4970ea39d5b7fdb19aedec4c21942e202de65bdeb782d38d2f299f http://download.redis.io/releases/redis-7.0.14.tar.gz
 hash redis-7.2.2.tar.gz sha256 ca999be08800edc6d265379c4c7aafad92f0ee400692e4e2d69829ab4b4c3d08 http://download.redis.io/releases/redis-7.2.2.tar.gz
 hash redis-7.2.3.tar.gz sha256 3e2b196d6eb4ddb9e743088bfc2915ccbb42d40f5a8a3edd8cb69c716ec34be7 http://download.redis.io/releases/redis-7.2.3.tar.gz
+hash redis-7.0.15.tar.gz sha256 98066f5363504b26c34dd20fbcc3c957990d764cdf42576c836fc021073f4341 http://download.redis.io/releases/redis-7.0.15.tar.gz
+hash redis-7.2.4.tar.gz sha256 8d104c26a154b29fd67d6568b4f375212212ad41e0c2caa3d66480e78dbd3b59 http://download.redis.io/releases/redis-7.2.4.tar.gz

redis.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package redis
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,7 +20,7 @@
 %define _log_dir        %{_localstatedir}/log/%{name}
 %define _conf_dir       %{_sysconfdir}/%{name}
 Name:           redis
-Version:        7.2.3
+Version:        7.2.4
 Release:        0
 Summary:        Persistent key-value database
 License:        BSD-3-Clause