Back to redis PTS page

Accepted redis 5:5.0.14-1+deb10u5 (source amd64 all) into oldoldstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 23 Oct 2023 13:22:27 +0100
Source: redis
Binary: redis redis-sentinel redis-server redis-tools redis-tools-dbgsym
Built-For-Profiles: nocheck
Architecture: source amd64 all
Version: 5:5.0.14-1+deb10u5
Distribution: buster-security
Urgency: high
Maintainer: Chris Lamb <lamby@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
 redis      - Persistent key-value database with network interface (metapackage
 redis-sentinel - Persistent key-value database with network interface (monitoring)
 redis-server - Persistent key-value database with network interface
 redis-tools - Persistent key-value database with network interface (client)
Closes: 1054225
Changes:
 redis (5:5.0.14-1+deb10u5) buster-security; urgency=high
 .
   * CVE-2023-45145: On startup, Redis began listening on a Unix socket before
     adjusting its permissions to the user-provided configuration. If a
     permissive umask(2) was used, this created a race condition that enabled,
     during a short period of time, another process to establish an otherwise
     unauthorized connection. (Closes: #1054225)
Checksums-Sha1:
 67db60d74fe79c2d8a5a970527b86bb4ec379bde 2190 redis_5.0.14-1+deb10u5.dsc
 d383cc7958c7ea89006509e4793c76eaa591cd20 2017965 redis_5.0.14.orig.tar.gz
 9178b2511356de186e5760ae34ca14df9a33237b 29768 redis_5.0.14-1+deb10u5.debian.tar.xz
 5f9ceeb9316ba31a67144e801c967889dc2e512b 63940 redis-sentinel_5.0.14-1+deb10u5_amd64.deb
 8e5cc3234e6bc92cc5bdaca4928c047b3d198b9e 91192 redis-server_5.0.14-1+deb10u5_amd64.deb
 26fe0e37452b683ddb792f5836897f6cc5170344 1256112 redis-tools-dbgsym_5.0.14-1+deb10u5_amd64.deb
 6330fb762471ca10c1728da5442aa076adfbb0b6 541192 redis-tools_5.0.14-1+deb10u5_amd64.deb
 b94f953abf0b033979a3bb0735ebd5dd40c88c43 56500 redis_5.0.14-1+deb10u5_all.deb
 201b70efd55ccda7e849093ac45869f226a3c829 7133 redis_5.0.14-1+deb10u5_amd64.buildinfo
Checksums-Sha256:
 928c9a40ee850296f457f609d5b8d46606c88233d13782a97a6dbd75230642a1 2190 redis_5.0.14-1+deb10u5.dsc
 6d8e87baeaae521a4ad2d9b5e2af78f582a4212a370c4a8e7e1c58dbbd9a0f19 2017965 redis_5.0.14.orig.tar.gz
 1331c19525d5e03a4cb97c56fcbdbb167a6edbd68e5a870f1c6b60cf12316ccd 29768 redis_5.0.14-1+deb10u5.debian.tar.xz
 2e781b0f80704476b6e314cb6183a1f4a792100a1574fc347aee02751da9932b 63940 redis-sentinel_5.0.14-1+deb10u5_amd64.deb
 6a8efa4b738f5d2b0ddf199e70747f2e78f86739e81d6960e482ed33554d96d7 91192 redis-server_5.0.14-1+deb10u5_amd64.deb
 eab9ca1c761e5258951072bd450c51134c77542856fe4815fd9eb0a4d6b9a62e 1256112 redis-tools-dbgsym_5.0.14-1+deb10u5_amd64.deb
 7784efe18fcf41a5365f3d52f1d3c68deb5c80e599799deb9080abf5fddb996a 541192 redis-tools_5.0.14-1+deb10u5_amd64.deb
 b3062f8baaa925984f750dd4edccbeecd23f325039558f0696bbb21c9ab60c49 56500 redis_5.0.14-1+deb10u5_all.deb
 5bd4b62513effcab8a0939c9feb776b4fcc5c5a5e5daeb434ef2ff8fa41f652a 7133 redis_5.0.14-1+deb10u5_amd64.buildinfo
Files:
 e8a495840dff74c78b65678ec79e63f7 2190 database optional redis_5.0.14-1+deb10u5.dsc
 1a06c1b414d9f895b32e6af714932175 2017965 database optional redis_5.0.14.orig.tar.gz
 4aca4e9cbef50674532cf79832d815fc 29768 database optional redis_5.0.14-1+deb10u5.debian.tar.xz
 b6d9f296ce9b6cca7db80267dac447c5 63940 database optional redis-sentinel_5.0.14-1+deb10u5_amd64.deb
 9774bb143d5dda57a9d351a8f3d56afc 91192 database optional redis-server_5.0.14-1+deb10u5_amd64.deb
 dd4c8b157e5412876140f754d0a394cf 1256112 debug optional redis-tools-dbgsym_5.0.14-1+deb10u5_amd64.deb
 29c17387dbf53b9a5dc6682b7c388047 541192 database optional redis-tools_5.0.14-1+deb10u5_amd64.deb
 12ac32052d09e8b94c2a9f9b94ca516f 56500 database optional redis_5.0.14-1+deb10u5_all.deb
 ca429555b34a64920a12143fbc85a4fd 7133 database optional redis_5.0.14-1+deb10u5_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=8EfA
-----END PGP SIGNATURE-----