From a1b8c2ac48a5c9d267b11536673076778967ced9 Mon Sep 17 00:00:00 2001 From: Changqing Li Date: Wed, 27 Dec 2023 10:55:57 +0800 Subject: [PATCH] redis: upgrade 6.2.13 -> 6.2.14 Upgrade urgency SECURITY: See security fixes below. Security fixes: (CVE-2023-45145) The wrong order of listen(2) and chmod(2) calls creates a race condition that can be used by another process to bypass desired Unix socket permissions on startup. Signed-off-by: Changqing Li Signed-off-by: Khem Raj (cherry picked from commit 5b34766daadf8f1e8ef3d55b24e0037c4d0727f5) Signed-off-by: Armin Kuster --- .../recipes-extended/redis/{redis_6.2.13.bb => redis_6.2.14.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-oe/recipes-extended/redis/{redis_6.2.13.bb => redis_6.2.14.bb} (96%) diff --git a/meta-oe/recipes-extended/redis/redis_6.2.13.bb b/meta-oe/recipes-extended/redis/redis_6.2.14.bb similarity index 96% rename from meta-oe/recipes-extended/redis/redis_6.2.13.bb rename to meta-oe/recipes-extended/redis/redis_6.2.14.bb index 640831c525..fa430ce402 100644 --- a/meta-oe/recipes-extended/redis/redis_6.2.13.bb +++ b/meta-oe/recipes-extended/redis/redis_6.2.14.bb @@ -17,7 +17,7 @@ SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \ file://GNU_SOURCE.patch \ file://0006-Define-correct-gregs-for-RISCV32.patch \ " -SRC_URI[sha256sum] = "89ff27c80d420456a721ccfb3beb7cc628d883c53059803513749e13214a23d1" +SRC_URI[sha256sum] = "34e74856cbd66fdb3a684fb349d93961d8c7aa668b06f81fd93ff267d09bc277" inherit autotools-brokensep update-rc.d systemd useradd