Ver código fonte

package/redis: security bump to v8.0.2

Among other things, this fixes the following CVE:

- CVE-2025-27151: redis-check-aof may lead to stack overflow and potential RCE
                  see https://www.cve.org/CVERecord?id=CVE-2025-27151

The license hash changed, because Redis 8.0.0 mistakenly included the text
of the GPLv3 instead of the AGPLv3, which has been fixed in 8.0.1

See the full changelog here:
https://github.com/redis/redis/blob/8.0.2/00-RELEASENOTES

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Titouan Christophe 2 meses atrás
pai
commit
3c874e1a94
2 arquivos alterados com 3 adições e 3 exclusões
  1. 2 2
      package/redis/redis.hash
  2. 1 1
      package/redis/redis.mk

+ 2 - 2
package/redis/redis.hash

@@ -1,5 +1,5 @@
 # From https://github.com/redis/redis-hashes/blob/master/README
-sha256  cf395665ba5fcecc4ef7aed1d8ab19c268619d98595827565c82344160171262  redis-8.0.0.tar.gz
+sha256  e9296b67b54c91befbcca046d67071c780a1f7c9f9e1ae5ed94773c3bb9b542f  redis-8.0.2.tar.gz
 
 # Locally calculated
-sha256  a797fcaa899397001f7fb0097583db96bcc74e9b0606c95435d8a293d84cdb76  LICENSE.txt
+sha256  4a0e416b9537688f30dfe69ddaceb2ca64d96b7df02a0a6760d376890ddc4e40  LICENSE.txt

+ 1 - 1
package/redis/redis.mk

@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-REDIS_VERSION = 8.0.0
+REDIS_VERSION = 8.0.2
 REDIS_SITE = http://download.redis.io/releases
 REDIS_LICENSE = \
 	AGPL-3.0 or SSPL-1.0 or RSAL-2.0 (core); \