Back to redis PTS page

Accepted redis 5:7.0.14-1 (source) into unstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 19 Oct 2023 15:50:56 +0100
Source: redis
Built-For-Profiles: nocheck
Architecture: source
Version: 5:7.0.14-1
Distribution: unstable
Urgency: high
Maintainer: Chris Lamb <lamby@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Closes: 1054225
Changes:
 redis (5:7.0.14-1) unstable; urgency=high
 .
   * New upstream security release:
 .
     - CVE-2023-45145: On startup, Redis began listening on a Unix socket before
       adjusting its permissions to the user-provided configuration. If a
       permissive umask(2) was used, this created a race condition that enabled,
       during a short period of time, another process to establish an otherwise
       unauthorized connection. (Closes: #1054225)
 .
   * Refresh patches.
Checksums-Sha1:
 f25b3dc8261c66d0b0634a2b1b332296daac4d8b 2273 redis_7.0.14-1.dsc
 dc3f0927bbb91be9c7f9b183d1fe07e88524db3d 3025790 redis_7.0.14.orig.tar.gz
 07d73689815217b6611a2f0fb191ade23a941edc 28908 redis_7.0.14-1.debian.tar.xz
 522c8467bbfee2f87e15a9d951e61a4756451a7e 7494 redis_7.0.14-1_amd64.buildinfo
Checksums-Sha256:
 c041f476b815ece1fd32698943e8df13f7e7d5d448cb90888c3a6e6e0d1fad60 2273 redis_7.0.14-1.dsc
 2fd5809a5139abad31c76dd723d610e4a8521272887008bafdbd507de50a2bdb 3025790 redis_7.0.14.orig.tar.gz
 ca5100ebd7364029555879fcf64e568698cf84bc3a0b17f32d47a2daa836a6da 28908 redis_7.0.14-1.debian.tar.xz
 5fdf9f3da61089f03ccff62f9ef0a6eddc78cc9fa4a14a41f25606c846c15ad0 7494 redis_7.0.14-1_amd64.buildinfo
Files:
 bc803bf180a1910464b049cde315e141 2273 database optional redis_7.0.14-1.dsc
 e014c1863b5c920aeb9d831715d9d993 3025790 database optional redis_7.0.14.orig.tar.gz
 7e814373d5500be3267c834c7ae0b83e 28908 database optional redis_7.0.14-1.debian.tar.xz
 e4abf5610f7bd5e0e61edce83f2d331b 7494 database optional redis_7.0.14-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=VIlj
-----END PGP SIGNATURE-----