From e5ca8073609f14cc4f9eb86b9ab48f46bac5f9dd Mon Sep 17 00:00:00 2001 From: Titouan Christophe Date: Mon, 2 Jun 2025 13:55:18 +0200 Subject: [PATCH] package/redis: security bump to v7.2.9 This fixes the following CVEs: - CVE-2025-27151: redis-check-aof may lead to stack overflow and potential RCE https://www.cve.org/CVERecord?id=CVE-2025-27151 - CVE-2025-21605: An unauthenticated client can cause an unlimited growth of output buffers https://www.cve.org/CVERecord?id=CVE-2025-21605 Signed-off-by: Titouan Christophe Signed-off-by: Thomas Perale --- package/redis/redis.hash | 2 +- package/redis/redis.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/redis/redis.hash b/package/redis/redis.hash index e01fc6a601..158931bb89 100644 --- a/package/redis/redis.hash +++ b/package/redis/redis.hash @@ -1,5 +1,5 @@ # From https://github.com/redis/redis-hashes/blob/master/README -sha256 72c081e3b8cfae7144273d26d76736f08319000af46c01515cad5d29765cead5 redis-7.2.7.tar.gz +sha256 2343cc49db3beb9d2925a44e13032805a608821a58f25bd874c84881115a20b7 redis-7.2.9.tar.gz # Locally calculated sha256 97f0a15b7bbae580d2609dad2e11f1956ae167be296ab60f4691ab9c30ee9828 COPYING diff --git a/package/redis/redis.mk b/package/redis/redis.mk index 7eb30abc4c..7c847690a9 100644 --- a/package/redis/redis.mk +++ b/package/redis/redis.mk @@ -4,7 +4,7 @@ # ################################################################################ -REDIS_VERSION = 7.2.7 +REDIS_VERSION = 7.2.9 REDIS_SITE = http://download.redis.io/releases REDIS_LICENSE = BSD-3-Clause (core); MIT and BSD family licenses (Bundled components) REDIS_LICENSE_FILES = COPYING