diff mbox series

[meta-oe] redis: upgrade 6.2.13 -> 6.2.14

Message ID 20231227025557.2872013-1-changqing.li@windriver.com
State Accepted
Headers show
Series [meta-oe] redis: upgrade 6.2.13 -> 6.2.14 | expand

Commit Message

Changqing Li Dec. 27, 2023, 2:55 a.m. UTC 
From: Changqing Li <changqing.li@windriver.com>

Upgrade urgency SECURITY: See security fixes below.

Security fixes:
(CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a
race condition that can be used by another process to bypass desired Unix
socket permissions on startup.

Signed-off-by: Changqing Li <changqing.li@windriver.com>
---
 .../recipes-extended/redis/{redis_6.2.13.bb => redis_6.2.14.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-extended/redis/{redis_6.2.13.bb => redis_6.2.14.bb} (96%)

Comments

Khem Raj Dec. 31, 2023, 12:38 a.m. UTC | #1 
On Wed, 27 Dec 2023 10:55:57 +0800, changqing.li@windriver.com wrote:
> Upgrade urgency SECURITY: See security fixes below.
> 
> Security fixes:
> (CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a
> race condition that can be used by another process to bypass desired Unix
> socket permissions on startup.
> 
> [...]

Applied, thanks!

[1/1] redis: upgrade 6.2.13 -> 6.2.14
      commit: 5b34766daadf8f1e8ef3d55b24e0037c4d0727f5

Best regards,
diff mbox series

Patch

diff --git a/meta-oe/recipes-extended/redis/redis_6.2.13.bb b/meta-oe/recipes-extended/redis/redis_6.2.14.bb
similarity index 96%
rename from meta-oe/recipes-extended/redis/redis_6.2.13.bb
rename to meta-oe/recipes-extended/redis/redis_6.2.14.bb
index 640831c525..fa430ce402 100644
--- a/meta-oe/recipes-extended/redis/redis_6.2.13.bb
+++ b/meta-oe/recipes-extended/redis/redis_6.2.14.bb
@@ -17,7 +17,7 @@  SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \
            file://GNU_SOURCE.patch \
            file://0006-Define-correct-gregs-for-RISCV32.patch \
            "
-SRC_URI[sha256sum] = "89ff27c80d420456a721ccfb3beb7cc628d883c53059803513749e13214a23d1"
+SRC_URI[sha256sum] = "34e74856cbd66fdb3a684fb349d93961d8c7aa668b06f81fd93ff267d09bc277"
 
 inherit autotools-brokensep update-rc.d systemd useradd