Rebase to 8.1.7
Resolves: RHEL-177033
This commit is contained in:
parent
a086484c38
commit
8ef6c57d7d
1
.gitignore
vendored
1
.gitignore
vendored
@ -6,3 +6,4 @@
|
||||
/valkey-8.0.6.tar.gz
|
||||
/valkey-8.0.7.tar.gz
|
||||
/valkey-8.1.6.tar.gz
|
||||
/valkey-8.1.7.tar.gz
|
||||
|
||||
2
sources
2
sources
@ -1 +1 @@
|
||||
SHA512 (valkey-8.1.6.tar.gz) = c991e8019637842305c394b25253f609e0ea02ebd53b71e6730ce0107e9957c04e3e7ae8e6779cfd698434c477c255f5e3beb27ebc24a280a7a6e5a640333e25
|
||||
SHA512 (valkey-8.1.7.tar.gz) = b4fc78e7315c04229b50e088884f3ce42985317a12baf43dd7afcad00956e85912eb01824ba2e8566b07e8378d3a4d5c5085e17c90018fdd5101d77f04801041
|
||||
|
||||
@ -1,34 +0,0 @@
|
||||
From 73696bf6e2cf754acc3ec24eaf9ca6b879bfc5d7 Mon Sep 17 00:00:00 2001
|
||||
From: Madelyn Olson <madelyneolson@gmail.com>
|
||||
Date: Thu, 29 May 2025 00:06:23 +0100
|
||||
Subject: [PATCH] Incorporate Redis CVE for CVE-2025-27151 (#2146)
|
||||
|
||||
Resolves https://github.com/valkey-io/valkey/issues/2145
|
||||
|
||||
Incorporate the CVE patch that was sent to us by Redis Ltd.
|
||||
|
||||
---------
|
||||
|
||||
Signed-off-by: Madelyn Olson <madelyneolson@gmail.com>
|
||||
Co-authored-by: Ping Xie <pingxie@outlook.com>
|
||||
---
|
||||
src/valkey-check-aof.c | 6 ++++++
|
||||
1 file changed, 6 insertions(+)
|
||||
|
||||
diff --git a/src/valkey-check-aof.c b/src/valkey-check-aof.c
|
||||
index ed0eb2b49d..a6e4b97c6d 100644
|
||||
--- a/src/valkey-check-aof.c
|
||||
+++ b/src/valkey-check-aof.c
|
||||
@@ -556,6 +556,12 @@ int redis_check_aof_main(int argc, char **argv) {
|
||||
goto invalid_args;
|
||||
}
|
||||
|
||||
+ /* Check if filepath is longer than PATH_MAX */
|
||||
+ if (strnlen(filepath, PATH_MAX + 1) > PATH_MAX) {
|
||||
+ printf("Error: filepath is too long (exceeds PATH_MAX)\n");
|
||||
+ goto invalid_args;
|
||||
+ }
|
||||
+
|
||||
/* In the glibc implementation dirname may modify their argument. */
|
||||
memcpy(temp_filepath, filepath, strlen(filepath) + 1);
|
||||
dirpath = dirname(temp_filepath);
|
||||
@ -2,7 +2,7 @@
|
||||
%bcond_with tests
|
||||
|
||||
Name: valkey
|
||||
Version: 8.1.6
|
||||
Version: 8.1.7
|
||||
Release: 1%{?dist}
|
||||
Summary: A persistent key-value database
|
||||
# valkey: BSD-3-Clause
|
||||
@ -20,7 +20,6 @@ Source4: %{name}.sysusers
|
||||
Source5: %{name}.tmpfiles
|
||||
Source9: migrate_redis_to_valkey.sh
|
||||
|
||||
Patch1: valkey-cve-2025-27151.patch
|
||||
# Fix default paths in configuration files for RPM layout
|
||||
Patch2: %{name}-conf.patch
|
||||
# Workaround to https://github.com/valkey-io/valkey/issues/2678
|
||||
@ -123,7 +122,6 @@ BuildArch: noarch
|
||||
|
||||
%prep
|
||||
%setup -qn %{name}-%{version}
|
||||
%patch -P1 -p1
|
||||
%patch -P2 -p1 -b.rpm
|
||||
%patch -P3 -p1 -b .loadmod
|
||||
%patch -P4 -p1 -b .bindnow
|
||||
@ -300,6 +298,9 @@ taskset -c 1 ./runtest --clients 50 --skiptest "Active defrag - AOF loading"
|
||||
|
||||
|
||||
%changelog
|
||||
* Tue May 19 2026 Petr Khartskhaev <pkhartsk@redhat.com> - 8.1.7-1
|
||||
- Rebase to 8.1.7 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631
|
||||
|
||||
* Wed Mar 04 2026 Lukas Javorsky <ljavorsk@redhat.com> - 8.1.6-1
|
||||
- Rebase to version 8.1
|
||||
- fix CONFIG REWRITE breaks configuration
|
||||
|
||||
Loading…
Reference in New Issue
Block a user