svn commit: r566402 - head/databases/redis-devel
Sergey A. Osokin
osa at FreeBSD.org
Tue Feb 23 14:16:04 UTC 2021
Author: osa
Date: Tue Feb 23 14:16:03 2021
New Revision: 566402
URL: https://svnweb.freebsd.org/changeset/ports/566402
Log:
Security update if you use 32bit build of redis (see bellow), MODERATE
if you used earlier versions of Redis 6.2, LOW otherwise.
Integer overflow on 32-bit systems (CVE-2021-21309):
Redis 4.0 or newer uses a configurable limit for the maximum supported bulk
input size. By default, it is 512MB which is a safe value for all platforms.
If the limit is significantly increased, receiving a large request from a client
may trigger several integer overflow scenarios, which would result with buffer
overflow and heap corruption.
ChangeLog: https://github.com/redis/redis/releases/tag/6.2.0
Modified:
head/databases/redis-devel/Makefile
head/databases/redis-devel/distinfo
Modified: head/databases/redis-devel/Makefile
==============================================================================
--- head/databases/redis-devel/Makefile Tue Feb 23 14:08:02 2021 (r566401)
+++ head/databases/redis-devel/Makefile Tue Feb 23 14:16:03 2021 (r566402)
@@ -2,8 +2,9 @@
# $FreeBSD$
PORTNAME= redis
-DISTVERSION= 6.2.0rc3
+PORTVERSION= 6.2.0
CATEGORIES= databases
+MASTER_SITES= https://download.redis.io/releases/
PKGNAMESUFFIX= -devel
MAINTAINER= osa at FreeBSD.org
@@ -13,8 +14,6 @@ LICENSE= BSD3CLAUSE
LICENSE_FILE= ${WRKSRC}/COPYING
USES+= compiler:c11 gmake
-USE_GITHUB= yes
-GH_TUPLE= redis:${PORTNAME}:2dba1e3
OPTIONS_DEFINE= JEMALLOC TESTS TLS TRIB
OPTIONS_RADIO= EXTLUA
Modified: head/databases/redis-devel/distinfo
==============================================================================
--- head/databases/redis-devel/distinfo Tue Feb 23 14:08:02 2021 (r566401)
+++ head/databases/redis-devel/distinfo Tue Feb 23 14:16:03 2021 (r566402)
@@ -1,3 +1,3 @@
-TIMESTAMP = 1612280969
-SHA256 (redis-redis-6.2.0rc3-2dba1e3_GH0.tar.gz) = 40e299e465439165cbd642f1e0d0f53f6806a8fa321e805da223309b0cc51358
-SIZE (redis-redis-6.2.0rc3-2dba1e3_GH0.tar.gz) = 2444819
+TIMESTAMP = 1614089376
+SHA256 (redis-6.2.0.tar.gz) = 67d624c25d962bd68aff8812a135df85bad07556b8825f3bcd5b522a9932dbca
+SIZE (redis-6.2.0.tar.gz) = 2435539
More information about the svn-ports-all
mailing list