[Buildroot] [git commit branch/2025.02.x] package/redis: security bump to v7.2.15
Titouan Christophe via buildroot <[email protected]>
| Newsgroups | net.busybox.buildroot |
|---|---|
| Message-ID | <[email protected]> |
commit: https://gitlab.com/buildroot.org/buildroot/-/commit/a29a996531b0839383c1b349472e9bdb3864e2b4 branch: https://gitlab.com/buildroot.org/buildroot/-/tree/2025.02.x See the release notes: https://github.com/redis/redis/blob/7.2.15/00-RELEASENOTES This fixes the following vulnerability: - Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution (alternative to commit 44d250a2e2a5242a36a84ba622ec4f2914377284) Signed-off-by: Titouan Christophe <[email protected]> --- package/redis/redis.hash | 2 +- package/redis/redis.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/redis/redis.hash b/package/redis/redis.hash index 055276a270..cbd4255df9 100644 --- a/package/redis/redis.hash +++ b/package/redis/redis.hash @@ -1,5 +1,5 @@ # From https://github.com/redis/redis-hashes/blob/master/README -sha256 21326da3f66c0aead4c8204c0ac52ff905337a77cadd169f75ac22835ea30025 redis-7.2.14.tar.gz +sha256 7bf7975331511fdb788e85dae63964b128fccee1df026a10db57444babc9c9c4 redis-7.2.15.tar.gz # Locally calculated sha256 97f0a15b7bbae580d2609dad2e11f1956ae167be296ab60f4691ab9c30ee9828 COPYING diff --git a/package/redis/redis.mk b/package/redis/redis.mk index 62f70b352b..ada95dd2ea 100644 --- a/package/redis/redis.mk +++ b/package/redis/redis.mk @@ -4,7 +4,7 @@ # ################################################################################ -REDIS_VERSION = 7.2.14 +REDIS_VERSION = 7.2.15 REDIS_SITE = http://download.redis.io/releases REDIS_LICENSE = BSD-3-Clause (core); MIT and BSD family licenses (Bundled components) REDIS_LICENSE_FILES = COPYING _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot