From 9a6b379be31d8619aa2ada44f5e74f3e8d662d3c159bc3b9371fe11f6059f43f Mon Sep 17 00:00:00 2001 From: Marcus Rueckert Date: Mon, 23 Oct 2023 13:27:44 +0000 Subject: [PATCH] Accepting request 1119207 from home:dspinella:branches:server:database - redis 7.2.2: * (CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup, bsc#1216376 * WAITAOF could timeout in the absence of write traffic in case a new AOF is created and an AOF rewrite can't immediately start * Fix crash when running rebalance command in a mixed cluster of 7.0 and 7.2 nodes * Fix the return type of the slot number in cluster shards to integer, which makes it consistent with past behavior * Fix CLUSTER commands are called from modules or scripts to return TLS info appropriately redis-cli, fix crash on reconnect when in SUBSCRIBE mode * Fix overflow calculation for next timer event OBS-URL: https://build.opensuse.org/request/show/1119207 OBS-URL: https://build.opensuse.org/package/show/server:database/redis?expand=0&rev=230 --- redis-7.2.1.tar.gz | 3 --- redis-7.2.2.tar.gz | 3 +++ redis.changes | 18 ++++++++++++++++++ redis.hashes | 3 +++ redis.spec | 2 +- 5 files changed, 25 insertions(+), 4 deletions(-) delete mode 100644 redis-7.2.1.tar.gz create mode 100644 redis-7.2.2.tar.gz diff --git a/redis-7.2.1.tar.gz b/redis-7.2.1.tar.gz deleted file mode 100644 index 8e02c65..0000000 --- a/redis-7.2.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5c76d990a1b1c5f949bcd1eed90d0c8a4f70369bdbdcb40288c561ddf88967a4 -size 3383319 diff --git a/redis-7.2.2.tar.gz b/redis-7.2.2.tar.gz new file mode 100644 index 0000000..fc8d3d8 --- /dev/null +++ b/redis-7.2.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ca999be08800edc6d265379c4c7aafad92f0ee400692e4e2d69829ab4b4c3d08 +size 3384618 diff --git a/redis.changes b/redis.changes index 40a7501..8731569 100644 --- a/redis.changes +++ b/redis.changes @@ -1,3 +1,21 @@ +------------------------------------------------------------------- +Fri Oct 20 10:03:33 UTC 2023 - Danilo Spinella + +- redis 7.2.2: + * (CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a + race condition that can be used by another process to bypass desired Unix + socket permissions on startup, bsc#1216376 + * WAITAOF could timeout in the absence of write traffic in case a new AOF is + created and an AOF rewrite can't immediately start + * Fix crash when running rebalance command in a mixed cluster of 7.0 and 7.2 + nodes + * Fix the return type of the slot number in cluster shards to integer, which + makes it consistent with past behavior + * Fix CLUSTER commands are called from modules or scripts to return TLS info + appropriately + redis-cli, fix crash on reconnect when in SUBSCRIBE mode + * Fix overflow calculation for next timer event + ------------------------------------------------------------------- Thu Sep 7 14:31:26 UTC 2023 - Danilo Spinella diff --git a/redis.hashes b/redis.hashes index bd6ecd6..a4d24d0 100644 --- a/redis.hashes +++ b/redis.hashes @@ -166,3 +166,6 @@ hash redis-7.2-rc3.tar.gz sha256 4035e2b146ca1eb43b4188ca30a6d7be1a4d40ac2dfdf58 hash redis-7.2.0.tar.gz sha256 8b12e242647635b419a0e1833eda02b65bf64e39eb9e509d9db4888fb3124943 http://download.redis.io/releases/redis-7.2.0.tar.gz hash redis-7.0.13.tar.gz sha256 97065774d5fb8388eb0d8913458decfcb167d356e40d31dd01cd30c1cc391673 http://download.redis.io/releases/redis-7.0.13.tar.gz hash redis-7.2.1.tar.gz sha256 5c76d990a1b1c5f949bcd1eed90d0c8a4f70369bdbdcb40288c561ddf88967a4 http://download.redis.io/releases/redis-7.2.1.tar.gz +hash redis-6.2.14.tar.gz sha256 34e74856cbd66fdb3a684fb349d93961d8c7aa668b06f81fd93ff267d09bc277 http://download.redis.io/releases/redis-6.2.14.tar.gz +hash redis-7.0.14.tar.gz sha256 7e1cdf347f4970ea39d5b7fdb19aedec4c21942e202de65bdeb782d38d2f299f http://download.redis.io/releases/redis-7.0.14.tar.gz +hash redis-7.2.2.tar.gz sha256 ca999be08800edc6d265379c4c7aafad92f0ee400692e4e2d69829ab4b4c3d08 http://download.redis.io/releases/redis-7.2.2.tar.gz diff --git a/redis.spec b/redis.spec index 2dee06f..a8743e4 100644 --- a/redis.spec +++ b/redis.spec @@ -20,7 +20,7 @@ %define _log_dir %{_localstatedir}/log/%{name} %define _conf_dir %{_sysconfdir}/%{name} Name: redis -Version: 7.2.1 +Version: 7.2.2 Release: 0 Summary: Persistent key-value database License: BSD-3-Clause