diff options
author | Yi Zhao <yi.zhao@windriver.com> | 2024-10-10 09:58:44 +0800 |
---|---|---|
committer | Khem Raj <raj.khem@gmail.com> | 2024-10-10 12:53:49 -0700 |
commit | f702405fe9c24f66e8bf38b8801cd7e87ddd2f55 (patch) | |
tree | 72d5399c1e9c4e7663e35a17a0e1515c0a460362 /meta-oe/recipes-extended/redis | |
parent | 21bdd363c97d89aec7d92007309af48db0a801d4 (diff) | |
download | meta-openembedded-f702405fe9c24f66e8bf38b8801cd7e87ddd2f55.tar.gz |
redis: upgrade 6.2.14 -> 6.2.16
ChangeLog:
Security fixes
==============
* (CVE-2024-31449) Lua library commands may lead to stack overflow and
potential RCE.
* (CVE-2024-31228) Potential Denial-of-service due to unbounded pattern
matching.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-oe/recipes-extended/redis')
8 files changed, 36 insertions, 40 deletions
diff --git a/meta-oe/recipes-extended/redis/redis/hiredis-use-default-CC-if-it-is-set.patch b/meta-oe/recipes-extended/redis/redis/0001-hiredis-use-default-CC-if-it-is-set.patch index d2a1b45e6..51a6e9c95 100644 --- a/meta-oe/recipes-extended/redis/redis/hiredis-use-default-CC-if-it-is-set.patch +++ b/meta-oe/recipes-extended/redis/redis/0001-hiredis-use-default-CC-if-it-is-set.patch | |||
@@ -1,11 +1,16 @@ | |||
1 | From dc745a33f3875cc72d41bd34ed490b352e546352 Mon Sep 17 00:00:00 2001 | 1 | From 67990f216f2fbbc8a6699c700dfc089aa617905f Mon Sep 17 00:00:00 2001 |
2 | From: Venture Research <tech@ventureresearch.com> | 2 | From: Venture Research <tech@ventureresearch.com> |
3 | Date: Fri, 8 Feb 2013 17:39:52 -0600 | 3 | Date: Fri, 8 Feb 2013 17:39:52 -0600 |
4 | Subject: [PATCH] hiredis: use default CC if it is set | 4 | Subject: [PATCH] hiredis: use default CC if it is set |
5 | MIME-Version: 1.0 | ||
6 | Content-Type: text/plain; charset=UTF-8 | ||
7 | Content-Transfer-Encoding: 8bit | ||
5 | 8 | ||
6 | Instead of trying to automagically figure out CC, which breaks with OE | 9 | Instead of trying to automagically figure out CC, which breaks with OE |
7 | as CC has spaces in it, just skip it if one was already passed in. | 10 | as CC has spaces in it, just skip it if one was already passed in. |
8 | 11 | ||
12 | Upstream-Status: Pending | ||
13 | |||
9 | Signed-off-by: Venture Research <tech@ventureresearch.com> | 14 | Signed-off-by: Venture Research <tech@ventureresearch.com> |
10 | 15 | ||
11 | Update to work with 4.0.8 | 16 | Update to work with 4.0.8 |
@@ -14,13 +19,11 @@ Signed-off-by: Alistair Francis <alistair.francis@wdc.com> | |||
14 | Reworked for 6.0.4 | 19 | Reworked for 6.0.4 |
15 | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> | 20 | Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> |
16 | --- | 21 | --- |
17 | Upstream-Status: Pending | ||
18 | |||
19 | deps/hiredis/Makefile | 2 -- | 22 | deps/hiredis/Makefile | 2 -- |
20 | 1 file changed, 2 deletions(-) | 23 | 1 file changed, 2 deletions(-) |
21 | 24 | ||
22 | diff --git a/deps/hiredis/Makefile b/deps/hiredis/Makefile | 25 | diff --git a/deps/hiredis/Makefile b/deps/hiredis/Makefile |
23 | index 25ac154..569f82b 100644 | 26 | index 7e41c97..54717e3 100644 |
24 | --- a/deps/hiredis/Makefile | 27 | --- a/deps/hiredis/Makefile |
25 | +++ b/deps/hiredis/Makefile | 28 | +++ b/deps/hiredis/Makefile |
26 | @@ -42,8 +42,6 @@ endef | 29 | @@ -42,8 +42,6 @@ endef |
@@ -32,6 +35,3 @@ index 25ac154..569f82b 100644 | |||
32 | OPTIMIZATION?=-O3 | 35 | OPTIMIZATION?=-O3 |
33 | WARNINGS=-Wall -W -Wstrict-prototypes -Wwrite-strings -Wno-missing-field-initializers | 36 | WARNINGS=-Wall -W -Wstrict-prototypes -Wwrite-strings -Wno-missing-field-initializers |
34 | DEBUG_FLAGS?= -g -ggdb | 37 | DEBUG_FLAGS?= -g -ggdb |
35 | -- | ||
36 | 2.21.3 | ||
37 | |||
diff --git a/meta-oe/recipes-extended/redis/redis/lua-update-Makefile-to-use-environment-build-setting.patch b/meta-oe/recipes-extended/redis/redis/0002-lua-update-Makefile-to-use-environment-build-setting.patch index aade7afd0..17b533669 100644 --- a/meta-oe/recipes-extended/redis/redis/lua-update-Makefile-to-use-environment-build-setting.patch +++ b/meta-oe/recipes-extended/redis/redis/0002-lua-update-Makefile-to-use-environment-build-setting.patch | |||
@@ -1,4 +1,4 @@ | |||
1 | From 097a2b259cb266c2c861dc74fa6f80712d6138c5 Mon Sep 17 00:00:00 2001 | 1 | From ef989aab052510bfda32b2b325a5f80b76c42677 Mon Sep 17 00:00:00 2001 |
2 | From: Venture Research <tech@ventureresearch.com> | 2 | From: Venture Research <tech@ventureresearch.com> |
3 | Date: Fri, 8 Feb 2013 20:22:19 -0600 | 3 | Date: Fri, 8 Feb 2013 20:22:19 -0600 |
4 | Subject: [PATCH] lua: update Makefile to use environment build settings | 4 | Subject: [PATCH] lua: update Makefile to use environment build settings |
@@ -6,6 +6,8 @@ Subject: [PATCH] lua: update Makefile to use environment build settings | |||
6 | OE-specific parameters, instead of overriding all of these simply use | 6 | OE-specific parameters, instead of overriding all of these simply use |
7 | the ones that are already passed in. Also configure for only Linux... | 7 | the ones that are already passed in. Also configure for only Linux... |
8 | 8 | ||
9 | Upstream-Status: Pending | ||
10 | |||
9 | Signed-off-by: Venture Research <tech@ventureresearch.com> | 11 | Signed-off-by: Venture Research <tech@ventureresearch.com> |
10 | 12 | ||
11 | Updated to work with 3.0.x | 13 | Updated to work with 3.0.x |
@@ -15,18 +17,16 @@ Signed-off-by: Armin Kuster <akust808@gmail.com> | |||
15 | updated to work wtih 6.2.1 | 17 | updated to work wtih 6.2.1 |
16 | Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com> | 18 | Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com> |
17 | --- | 19 | --- |
18 | Upstream-Status: Pending | ||
19 | |||
20 | deps/Makefile | 1 - | 20 | deps/Makefile | 1 - |
21 | deps/lua/Makefile | 1 - | 21 | deps/lua/Makefile | 1 - |
22 | deps/lua/src/Makefile | 16 ++++++---------- | 22 | deps/lua/src/Makefile | 16 ++++++---------- |
23 | 3 files changed, 6 insertions(+), 12 deletions(-) | 23 | 3 files changed, 6 insertions(+), 12 deletions(-) |
24 | 24 | ||
25 | diff --git a/deps/Makefile b/deps/Makefile | 25 | diff --git a/deps/Makefile b/deps/Makefile |
26 | index ff16ee9..d8d64aa 100644 | 26 | index cbe3aef..76bc222 100644 |
27 | --- a/deps/Makefile | 27 | --- a/deps/Makefile |
28 | +++ b/deps/Makefile | 28 | +++ b/deps/Makefile |
29 | @@ -74,7 +74,6 @@ LUA_LDFLAGS+= $(LDFLAGS) | 29 | @@ -81,7 +81,6 @@ endif |
30 | # lua's Makefile defines AR="ar rcu", which is unusual, and makes it more | 30 | # lua's Makefile defines AR="ar rcu", which is unusual, and makes it more |
31 | # challenging to cross-compile lua (and redis). These defines make it easier | 31 | # challenging to cross-compile lua (and redis). These defines make it easier |
32 | # to fit redis into cross-compilation environments, which typically set AR. | 32 | # to fit redis into cross-compilation environments, which typically set AR. |
diff --git a/meta-oe/recipes-extended/redis/redis/oe-use-libc-malloc.patch b/meta-oe/recipes-extended/redis/redis/0003-hack-to-force-use-of-libc-malloc.patch index e76bdbc26..f1021eef6 100644 --- a/meta-oe/recipes-extended/redis/redis/oe-use-libc-malloc.patch +++ b/meta-oe/recipes-extended/redis/redis/0003-hack-to-force-use-of-libc-malloc.patch | |||
@@ -1,4 +1,4 @@ | |||
1 | From 1fa047162983d4a7e0576f0837a73a6027a783bd Mon Sep 17 00:00:00 2001 | 1 | From b9586abcb803747301f6cc4ff93c7642bef693ea Mon Sep 17 00:00:00 2001 |
2 | From: Venture Research <tech@ventureresearch.com> | 2 | From: Venture Research <tech@ventureresearch.com> |
3 | Date: Wed, 6 Feb 2013 20:51:02 -0600 | 3 | Date: Wed, 6 Feb 2013 20:51:02 -0600 |
4 | Subject: [PATCH] hack to force use of libc malloc | 4 | Subject: [PATCH] hack to force use of libc malloc |
@@ -9,19 +9,18 @@ removed in favor of magic. | |||
9 | Note that this of course doesn't allow tcmalloc and jemalloc, however | 9 | Note that this of course doesn't allow tcmalloc and jemalloc, however |
10 | jemalloc wasn't building correctly. | 10 | jemalloc wasn't building correctly. |
11 | 11 | ||
12 | Upstream-Status: Pending | ||
13 | |||
12 | Signed-off-by: Venture Research <tech@ventureresearch.com> | 14 | Signed-off-by: Venture Research <tech@ventureresearch.com> |
13 | 15 | ||
14 | Update to work with 4.0.8 | 16 | Update to work with 4.0.8 |
15 | Signed-off-by: Alistair Francis <alistair.francis@wdc.com> | 17 | Signed-off-by: Alistair Francis <alistair.francis@wdc.com> |
16 | |||
17 | --- | 18 | --- |
18 | Upstream-Status: Pending | ||
19 | |||
20 | src/Makefile | 3 ++- | 19 | src/Makefile | 3 ++- |
21 | 1 file changed, 2 insertions(+), 1 deletion(-) | 20 | 1 file changed, 2 insertions(+), 1 deletion(-) |
22 | 21 | ||
23 | diff --git a/src/Makefile b/src/Makefile | 22 | diff --git a/src/Makefile b/src/Makefile |
24 | index ecd6929..c7f43c5 100644 | 23 | index 7d75c83..35dd314 100644 |
25 | --- a/src/Makefile | 24 | --- a/src/Makefile |
26 | +++ b/src/Makefile | 25 | +++ b/src/Makefile |
27 | @@ -13,7 +13,8 @@ | 26 | @@ -13,7 +13,8 @@ |
diff --git a/meta-oe/recipes-extended/redis/redis/0001-src-Do-not-reset-FINAL_LIBS.patch b/meta-oe/recipes-extended/redis/redis/0004-src-Do-not-reset-FINAL_LIBS.patch index 66ab0ee33..958106e26 100644 --- a/meta-oe/recipes-extended/redis/redis/0001-src-Do-not-reset-FINAL_LIBS.patch +++ b/meta-oe/recipes-extended/redis/redis/0004-src-Do-not-reset-FINAL_LIBS.patch | |||
@@ -1,4 +1,4 @@ | |||
1 | From 97584e1eb78dc18599534b47b6670c20c63f5ee2 Mon Sep 17 00:00:00 2001 | 1 | From a4d87aca1c00c53b386ee7490223971e00873add Mon Sep 17 00:00:00 2001 |
2 | From: Khem Raj <raj.khem@gmail.com> | 2 | From: Khem Raj <raj.khem@gmail.com> |
3 | Date: Tue, 10 Sep 2019 20:04:26 -0700 | 3 | Date: Tue, 10 Sep 2019 20:04:26 -0700 |
4 | Subject: [PATCH] src: Do not reset FINAL_LIBS | 4 | Subject: [PATCH] src: Do not reset FINAL_LIBS |
@@ -9,17 +9,17 @@ environment to get it going | |||
9 | e.g. -latomic is needed on clang/x86 to provide for 64bit atomics | 9 | e.g. -latomic is needed on clang/x86 to provide for 64bit atomics |
10 | 10 | ||
11 | Upstream-Status: Pending | 11 | Upstream-Status: Pending |
12 | Signed-off-by: Khem Raj <raj.khem@gmail.com> | ||
13 | 12 | ||
13 | Signed-off-by: Khem Raj <raj.khem@gmail.com> | ||
14 | --- | 14 | --- |
15 | src/Makefile | 2 +- | 15 | src/Makefile | 2 +- |
16 | 1 file changed, 1 insertion(+), 1 deletion(-) | 16 | 1 file changed, 1 insertion(+), 1 deletion(-) |
17 | 17 | ||
18 | diff --git a/src/Makefile b/src/Makefile | 18 | diff --git a/src/Makefile b/src/Makefile |
19 | index 5564351..83ccd76 100644 | 19 | index 35dd314..3770f96 100644 |
20 | --- a/src/Makefile | 20 | --- a/src/Makefile |
21 | +++ b/src/Makefile | 21 | +++ b/src/Makefile |
22 | @@ -91,7 +91,7 @@ endif | 22 | @@ -93,7 +93,7 @@ endif |
23 | 23 | ||
24 | FINAL_CFLAGS=$(STD) $(WARN) $(OPT) $(DEBUG) $(CFLAGS) $(REDIS_CFLAGS) | 24 | FINAL_CFLAGS=$(STD) $(WARN) $(OPT) $(DEBUG) $(CFLAGS) $(REDIS_CFLAGS) |
25 | FINAL_LDFLAGS=$(LDFLAGS) $(REDIS_LDFLAGS) $(DEBUG) | 25 | FINAL_LDFLAGS=$(LDFLAGS) $(REDIS_LDFLAGS) $(DEBUG) |
diff --git a/meta-oe/recipes-extended/redis/redis/GNU_SOURCE.patch b/meta-oe/recipes-extended/redis/redis/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch index 20f689bd0..d73c66c9d 100644 --- a/meta-oe/recipes-extended/redis/redis/GNU_SOURCE.patch +++ b/meta-oe/recipes-extended/redis/redis/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch | |||
@@ -1,4 +1,4 @@ | |||
1 | From 98d526f76049be21bf3d77158236b2189419a78e Mon Sep 17 00:00:00 2001 | 1 | From 2e6311c9c7cd85bf63eab8fe92c08ec1ec01b6fc Mon Sep 17 00:00:00 2001 |
2 | From: Khem Raj <raj.khem@gmail.com> | 2 | From: Khem Raj <raj.khem@gmail.com> |
3 | Date: Sat, 21 Dec 2019 12:09:51 -0800 | 3 | Date: Sat, 21 Dec 2019 12:09:51 -0800 |
4 | Subject: [PATCH] Define _GNU_SOURCE to get PTHREAD_MUTEX_INITIALIZER | 4 | Subject: [PATCH] Define _GNU_SOURCE to get PTHREAD_MUTEX_INITIALIZER |
@@ -9,6 +9,7 @@ Fixes | |||
9 | | | ^~~~~~~~~~~~~~~~~~~~~~~~~ | 9 | | | ^~~~~~~~~~~~~~~~~~~~~~~~~ |
10 | 10 | ||
11 | Upstream-Status: Pending | 11 | Upstream-Status: Pending |
12 | |||
12 | Signed-off-by: Khem Raj <raj.khem@gmail.com> | 13 | Signed-off-by: Khem Raj <raj.khem@gmail.com> |
13 | --- | 14 | --- |
14 | src/zmalloc.c | 1 + | 15 | src/zmalloc.c | 1 + |
@@ -26,6 +27,3 @@ index 1f33d09..5e182d1 100644 | |||
26 | #include <stdio.h> | 27 | #include <stdio.h> |
27 | #include <stdlib.h> | 28 | #include <stdlib.h> |
28 | #include <stdint.h> | 29 | #include <stdint.h> |
29 | -- | ||
30 | 2.25.1 | ||
31 | |||
diff --git a/meta-oe/recipes-extended/redis/redis/0006-Define-correct-gregs-for-RISCV32.patch b/meta-oe/recipes-extended/redis/redis/0006-Define-correct-gregs-for-RISCV32.patch index 9d7e50271..bb3f5c607 100644 --- a/meta-oe/recipes-extended/redis/redis/0006-Define-correct-gregs-for-RISCV32.patch +++ b/meta-oe/recipes-extended/redis/redis/0006-Define-correct-gregs-for-RISCV32.patch | |||
@@ -1,9 +1,10 @@ | |||
1 | From 26bd72f3b8de22e5036d86e6c79f815853b83473 Mon Sep 17 00:00:00 2001 | 1 | From 6149911f7a6fbaef3ed418408e2b501fa9479ffa Mon Sep 17 00:00:00 2001 |
2 | From: Khem Raj <raj.khem@gmail.com> | 2 | From: Khem Raj <raj.khem@gmail.com> |
3 | Date: Mon, 26 Oct 2020 21:32:22 -0700 | 3 | Date: Mon, 26 Oct 2020 21:32:22 -0700 |
4 | Subject: [PATCH] Define correct gregs for RISCV32 | 4 | Subject: [PATCH] Define correct gregs for RISCV32 |
5 | 5 | ||
6 | Upstream-Status: Pending | 6 | Upstream-Status: Pending |
7 | |||
7 | Signed-off-by: Khem Raj <raj.khem@gmail.com> | 8 | Signed-off-by: Khem Raj <raj.khem@gmail.com> |
8 | 9 | ||
9 | Updated patch for 6.2.1 | 10 | Updated patch for 6.2.1 |
@@ -13,10 +14,10 @@ Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com> | |||
13 | 1 file changed, 24 insertions(+), 2 deletions(-) | 14 | 1 file changed, 24 insertions(+), 2 deletions(-) |
14 | 15 | ||
15 | diff --git a/src/debug.c b/src/debug.c | 16 | diff --git a/src/debug.c b/src/debug.c |
16 | index 5318c14..8c21b47 100644 | 17 | index bb76c5d..55a0696 100644 |
17 | --- a/src/debug.c | 18 | --- a/src/debug.c |
18 | +++ b/src/debug.c | 19 | +++ b/src/debug.c |
19 | @@ -1055,7 +1055,9 @@ static void* getAndSetMcontextEip(ucontext_t *uc, void *eip) { | 20 | @@ -1067,7 +1067,9 @@ static void* getAndSetMcontextEip(ucontext_t *uc, void *eip) { |
20 | #endif | 21 | #endif |
21 | #elif defined(__linux__) | 22 | #elif defined(__linux__) |
22 | /* Linux */ | 23 | /* Linux */ |
@@ -27,7 +28,7 @@ index 5318c14..8c21b47 100644 | |||
27 | GET_SET_RETURN(uc->uc_mcontext.gregs[14], eip); | 28 | GET_SET_RETURN(uc->uc_mcontext.gregs[14], eip); |
28 | #elif defined(__X86_64__) || defined(__x86_64__) | 29 | #elif defined(__X86_64__) || defined(__x86_64__) |
29 | GET_SET_RETURN(uc->uc_mcontext.gregs[16], eip); | 30 | GET_SET_RETURN(uc->uc_mcontext.gregs[16], eip); |
30 | @@ -1222,8 +1224,28 @@ void logRegisters(ucontext_t *uc) { | 31 | @@ -1234,8 +1236,28 @@ void logRegisters(ucontext_t *uc) { |
31 | #endif | 32 | #endif |
32 | /* Linux */ | 33 | /* Linux */ |
33 | #elif defined(__linux__) | 34 | #elif defined(__linux__) |
@@ -57,6 +58,3 @@ index 5318c14..8c21b47 100644 | |||
57 | serverLog(LL_WARNING, | 58 | serverLog(LL_WARNING, |
58 | "\n" | 59 | "\n" |
59 | "EAX:%08lx EBX:%08lx ECX:%08lx EDX:%08lx\n" | 60 | "EAX:%08lx EBX:%08lx ECX:%08lx EDX:%08lx\n" |
60 | -- | ||
61 | 2.25.1 | ||
62 | |||
diff --git a/meta-oe/recipes-extended/redis/redis/init-redis-server b/meta-oe/recipes-extended/redis/redis/init-redis-server index c5f335f57..c5f335f57 100755..100644 --- a/meta-oe/recipes-extended/redis/redis/init-redis-server +++ b/meta-oe/recipes-extended/redis/redis/init-redis-server | |||
diff --git a/meta-oe/recipes-extended/redis/redis_6.2.14.bb b/meta-oe/recipes-extended/redis/redis_6.2.16.bb index 2433abba5..40473461a 100644 --- a/meta-oe/recipes-extended/redis/redis_6.2.14.bb +++ b/meta-oe/recipes-extended/redis/redis_6.2.16.bb | |||
@@ -10,19 +10,20 @@ SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \ | |||
10 | file://redis.conf \ | 10 | file://redis.conf \ |
11 | file://init-redis-server \ | 11 | file://init-redis-server \ |
12 | file://redis.service \ | 12 | file://redis.service \ |
13 | file://hiredis-use-default-CC-if-it-is-set.patch \ | 13 | file://0001-hiredis-use-default-CC-if-it-is-set.patch \ |
14 | file://lua-update-Makefile-to-use-environment-build-setting.patch \ | 14 | file://0002-lua-update-Makefile-to-use-environment-build-setting.patch \ |
15 | file://oe-use-libc-malloc.patch \ | 15 | file://0003-hack-to-force-use-of-libc-malloc.patch \ |
16 | file://0001-src-Do-not-reset-FINAL_LIBS.patch \ | 16 | file://0004-src-Do-not-reset-FINAL_LIBS.patch \ |
17 | file://GNU_SOURCE.patch \ | 17 | file://0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch \ |
18 | file://0006-Define-correct-gregs-for-RISCV32.patch \ | 18 | file://0006-Define-correct-gregs-for-RISCV32.patch \ |
19 | " | 19 | " |
20 | SRC_URI[sha256sum] = "34e74856cbd66fdb3a684fb349d93961d8c7aa668b06f81fd93ff267d09bc277" | 20 | |
21 | SRC_URI[sha256sum] = "846bff83c26d827d49f8cc8114ea9d1e72eea1169f7de36b8135ea2cec104e7d" | ||
21 | 22 | ||
22 | inherit autotools-brokensep update-rc.d systemd useradd | 23 | inherit autotools-brokensep update-rc.d systemd useradd |
23 | 24 | ||
24 | FINAL_LIBS:x86:toolchain-clang = "-latomic" | 25 | FINAL_LIBS:x86:toolchain-clang = "-latomic" |
25 | FINAL_LIBS:riscv32:toolchain-clang = "-latomic" | 26 | FINAL_LIBS:riscv32 = "-latomic" |
26 | FINAL_LIBS:mips = "-latomic" | 27 | FINAL_LIBS:mips = "-latomic" |
27 | FINAL_LIBS:arm = "-latomic" | 28 | FINAL_LIBS:arm = "-latomic" |
28 | FINAL_LIBS:powerpc = "-latomic" | 29 | FINAL_LIBS:powerpc = "-latomic" |