mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-08 00:20:38 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/redis: security bump to v8.0.2

Browse Source 
Among other things, this fixes the following CVE:

- CVE-2025-27151: redis-check-aof may lead to stack overflow and potential RCE
                  see https://www.cve.org/CVERecord?id=CVE-2025-27151

The license hash changed, because Redis 8.0.0 mistakenly included the text
of the GPLv3 instead of the AGPLv3, which has been fixed in 8.0.1

See the full changelog here:
https://github.com/redis/redis/blob/8.0.2/00-RELEASENOTES

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Titouan Christophe
2025-06-02 13:43:32 +02:00
committed by Peter Korsgaard
parent fe4533fd0d
commit 3c874e1a94
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/redis/redis.hash
View File

@@ -1,5 +1,5 @@
# From https://github.com/redis/redis-hashes/blob/master/README
sha256 cf395665ba5fcecc4ef7aed1d8ab19c268619d98595827565c82344160171262 redis-8.0.0.tar.gz
sha256 e9296b67b54c91befbcca046d67071c780a1f7c9f9e1ae5ed94773c3bb9b542f redis-8.0.2.tar.gz
# Locally calculated
sha256 a797fcaa899397001f7fb0097583db96bcc74e9b0606c95435d8a293d84cdb76 LICENSE.txt
sha256 4a0e416b9537688f30dfe69ddaceb2ca64d96b7df02a0a6760d376890ddc4e40 LICENSE.txt

2
package/redis/redis.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
REDIS_VERSION = 8.0.0
REDIS_VERSION = 8.0.2
REDIS_SITE = http://download.redis.io/releases
REDIS_LICENSE = \
AGPL-3.0 or SSPL-1.0 or RSAL-2.0 (core); \