summaryrefslogtreecommitdiffstats
path: root/meta-oe
diff options
context:
space:
mode:
authorYi Zhao <yi.zhao@windriver.com>2024-10-10 09:58:44 +0800
committerKhem Raj <raj.khem@gmail.com>2024-10-10 12:53:49 -0700
commitf702405fe9c24f66e8bf38b8801cd7e87ddd2f55 (patch)
tree72d5399c1e9c4e7663e35a17a0e1515c0a460362 /meta-oe
parent21bdd363c97d89aec7d92007309af48db0a801d4 (diff)
downloadmeta-openembedded-f702405fe9c24f66e8bf38b8801cd7e87ddd2f55.tar.gz
redis: upgrade 6.2.14 -> 6.2.16
ChangeLog: Security fixes ============== * (CVE-2024-31449) Lua library commands may lead to stack overflow and potential RCE. * (CVE-2024-31228) Potential Denial-of-service due to unbounded pattern matching. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-oe')
-rw-r--r--meta-oe/recipes-extended/redis/redis/0001-hiredis-use-default-CC-if-it-is-set.patch (renamed from meta-oe/recipes-extended/redis/redis/hiredis-use-default-CC-if-it-is-set.patch)14
-rw-r--r--meta-oe/recipes-extended/redis/redis/0002-lua-update-Makefile-to-use-environment-build-setting.patch (renamed from meta-oe/recipes-extended/redis/redis/lua-update-Makefile-to-use-environment-build-setting.patch)10
-rw-r--r--meta-oe/recipes-extended/redis/redis/0003-hack-to-force-use-of-libc-malloc.patch (renamed from meta-oe/recipes-extended/redis/redis/oe-use-libc-malloc.patch)9
-rw-r--r--meta-oe/recipes-extended/redis/redis/0004-src-Do-not-reset-FINAL_LIBS.patch (renamed from meta-oe/recipes-extended/redis/redis/0001-src-Do-not-reset-FINAL_LIBS.patch)8
-rw-r--r--meta-oe/recipes-extended/redis/redis/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch (renamed from meta-oe/recipes-extended/redis/redis/GNU_SOURCE.patch)6
-rw-r--r--meta-oe/recipes-extended/redis/redis/0006-Define-correct-gregs-for-RISCV32.patch12
-rw-r--r--[-rwxr-xr-x]meta-oe/recipes-extended/redis/redis/init-redis-server0
-rw-r--r--meta-oe/recipes-extended/redis/redis_6.2.16.bb (renamed from meta-oe/recipes-extended/redis/redis_6.2.14.bb)17
8 files changed, 36 insertions, 40 deletions
diff --git a/meta-oe/recipes-extended/redis/redis/hiredis-use-default-CC-if-it-is-set.patch b/meta-oe/recipes-extended/redis/redis/0001-hiredis-use-default-CC-if-it-is-set.patch
index d2a1b45e6..51a6e9c95 100644
--- a/meta-oe/recipes-extended/redis/redis/hiredis-use-default-CC-if-it-is-set.patch
+++ b/meta-oe/recipes-extended/redis/redis/0001-hiredis-use-default-CC-if-it-is-set.patch
@@ -1,11 +1,16 @@
1From dc745a33f3875cc72d41bd34ed490b352e546352 Mon Sep 17 00:00:00 2001 1From 67990f216f2fbbc8a6699c700dfc089aa617905f Mon Sep 17 00:00:00 2001
2From: Venture Research <tech@ventureresearch.com> 2From: Venture Research <tech@ventureresearch.com>
3Date: Fri, 8 Feb 2013 17:39:52 -0600 3Date: Fri, 8 Feb 2013 17:39:52 -0600
4Subject: [PATCH] hiredis: use default CC if it is set 4Subject: [PATCH] hiredis: use default CC if it is set
5MIME-Version: 1.0
6Content-Type: text/plain; charset=UTF-8
7Content-Transfer-Encoding: 8bit
5 8
6Instead of trying to automagically figure out CC, which breaks with OE 9Instead of trying to automagically figure out CC, which breaks with OE
7as CC has spaces in it, just skip it if one was already passed in. 10as CC has spaces in it, just skip it if one was already passed in.
8 11
12Upstream-Status: Pending
13
9Signed-off-by: Venture Research <tech@ventureresearch.com> 14Signed-off-by: Venture Research <tech@ventureresearch.com>
10 15
11Update to work with 4.0.8 16Update to work with 4.0.8
@@ -14,13 +19,11 @@ Signed-off-by: Alistair Francis <alistair.francis@wdc.com>
14Reworked for 6.0.4 19Reworked for 6.0.4
15Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> 20Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
16--- 21---
17Upstream-Status: Pending
18
19 deps/hiredis/Makefile | 2 -- 22 deps/hiredis/Makefile | 2 --
20 1 file changed, 2 deletions(-) 23 1 file changed, 2 deletions(-)
21 24
22diff --git a/deps/hiredis/Makefile b/deps/hiredis/Makefile 25diff --git a/deps/hiredis/Makefile b/deps/hiredis/Makefile
23index 25ac154..569f82b 100644 26index 7e41c97..54717e3 100644
24--- a/deps/hiredis/Makefile 27--- a/deps/hiredis/Makefile
25+++ b/deps/hiredis/Makefile 28+++ b/deps/hiredis/Makefile
26@@ -42,8 +42,6 @@ endef 29@@ -42,8 +42,6 @@ endef
@@ -32,6 +35,3 @@ index 25ac154..569f82b 100644
32 OPTIMIZATION?=-O3 35 OPTIMIZATION?=-O3
33 WARNINGS=-Wall -W -Wstrict-prototypes -Wwrite-strings -Wno-missing-field-initializers 36 WARNINGS=-Wall -W -Wstrict-prototypes -Wwrite-strings -Wno-missing-field-initializers
34 DEBUG_FLAGS?= -g -ggdb 37 DEBUG_FLAGS?= -g -ggdb
35--
362.21.3
37
diff --git a/meta-oe/recipes-extended/redis/redis/lua-update-Makefile-to-use-environment-build-setting.patch b/meta-oe/recipes-extended/redis/redis/0002-lua-update-Makefile-to-use-environment-build-setting.patch
index aade7afd0..17b533669 100644
--- a/meta-oe/recipes-extended/redis/redis/lua-update-Makefile-to-use-environment-build-setting.patch
+++ b/meta-oe/recipes-extended/redis/redis/0002-lua-update-Makefile-to-use-environment-build-setting.patch
@@ -1,4 +1,4 @@
1From 097a2b259cb266c2c861dc74fa6f80712d6138c5 Mon Sep 17 00:00:00 2001 1From ef989aab052510bfda32b2b325a5f80b76c42677 Mon Sep 17 00:00:00 2001
2From: Venture Research <tech@ventureresearch.com> 2From: Venture Research <tech@ventureresearch.com>
3Date: Fri, 8 Feb 2013 20:22:19 -0600 3Date: Fri, 8 Feb 2013 20:22:19 -0600
4Subject: [PATCH] lua: update Makefile to use environment build settings 4Subject: [PATCH] lua: update Makefile to use environment build settings
@@ -6,6 +6,8 @@ Subject: [PATCH] lua: update Makefile to use environment build settings
6OE-specific parameters, instead of overriding all of these simply use 6OE-specific parameters, instead of overriding all of these simply use
7the ones that are already passed in. Also configure for only Linux... 7the ones that are already passed in. Also configure for only Linux...
8 8
9Upstream-Status: Pending
10
9Signed-off-by: Venture Research <tech@ventureresearch.com> 11Signed-off-by: Venture Research <tech@ventureresearch.com>
10 12
11Updated to work with 3.0.x 13Updated to work with 3.0.x
@@ -15,18 +17,16 @@ Signed-off-by: Armin Kuster <akust808@gmail.com>
15updated to work wtih 6.2.1 17updated to work wtih 6.2.1
16Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com> 18Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
17--- 19---
18Upstream-Status: Pending
19
20 deps/Makefile | 1 - 20 deps/Makefile | 1 -
21 deps/lua/Makefile | 1 - 21 deps/lua/Makefile | 1 -
22 deps/lua/src/Makefile | 16 ++++++---------- 22 deps/lua/src/Makefile | 16 ++++++----------
23 3 files changed, 6 insertions(+), 12 deletions(-) 23 3 files changed, 6 insertions(+), 12 deletions(-)
24 24
25diff --git a/deps/Makefile b/deps/Makefile 25diff --git a/deps/Makefile b/deps/Makefile
26index ff16ee9..d8d64aa 100644 26index cbe3aef..76bc222 100644
27--- a/deps/Makefile 27--- a/deps/Makefile
28+++ b/deps/Makefile 28+++ b/deps/Makefile
29@@ -74,7 +74,6 @@ LUA_LDFLAGS+= $(LDFLAGS) 29@@ -81,7 +81,6 @@ endif
30 # lua's Makefile defines AR="ar rcu", which is unusual, and makes it more 30 # lua's Makefile defines AR="ar rcu", which is unusual, and makes it more
31 # challenging to cross-compile lua (and redis). These defines make it easier 31 # challenging to cross-compile lua (and redis). These defines make it easier
32 # to fit redis into cross-compilation environments, which typically set AR. 32 # to fit redis into cross-compilation environments, which typically set AR.
diff --git a/meta-oe/recipes-extended/redis/redis/oe-use-libc-malloc.patch b/meta-oe/recipes-extended/redis/redis/0003-hack-to-force-use-of-libc-malloc.patch
index e76bdbc26..f1021eef6 100644
--- a/meta-oe/recipes-extended/redis/redis/oe-use-libc-malloc.patch
+++ b/meta-oe/recipes-extended/redis/redis/0003-hack-to-force-use-of-libc-malloc.patch
@@ -1,4 +1,4 @@
1From 1fa047162983d4a7e0576f0837a73a6027a783bd Mon Sep 17 00:00:00 2001 1From b9586abcb803747301f6cc4ff93c7642bef693ea Mon Sep 17 00:00:00 2001
2From: Venture Research <tech@ventureresearch.com> 2From: Venture Research <tech@ventureresearch.com>
3Date: Wed, 6 Feb 2013 20:51:02 -0600 3Date: Wed, 6 Feb 2013 20:51:02 -0600
4Subject: [PATCH] hack to force use of libc malloc 4Subject: [PATCH] hack to force use of libc malloc
@@ -9,19 +9,18 @@ removed in favor of magic.
9Note that this of course doesn't allow tcmalloc and jemalloc, however 9Note that this of course doesn't allow tcmalloc and jemalloc, however
10jemalloc wasn't building correctly. 10jemalloc wasn't building correctly.
11 11
12Upstream-Status: Pending
13
12Signed-off-by: Venture Research <tech@ventureresearch.com> 14Signed-off-by: Venture Research <tech@ventureresearch.com>
13 15
14Update to work with 4.0.8 16Update to work with 4.0.8
15Signed-off-by: Alistair Francis <alistair.francis@wdc.com> 17Signed-off-by: Alistair Francis <alistair.francis@wdc.com>
16
17--- 18---
18Upstream-Status: Pending
19
20 src/Makefile | 3 ++- 19 src/Makefile | 3 ++-
21 1 file changed, 2 insertions(+), 1 deletion(-) 20 1 file changed, 2 insertions(+), 1 deletion(-)
22 21
23diff --git a/src/Makefile b/src/Makefile 22diff --git a/src/Makefile b/src/Makefile
24index ecd6929..c7f43c5 100644 23index 7d75c83..35dd314 100644
25--- a/src/Makefile 24--- a/src/Makefile
26+++ b/src/Makefile 25+++ b/src/Makefile
27@@ -13,7 +13,8 @@ 26@@ -13,7 +13,8 @@
diff --git a/meta-oe/recipes-extended/redis/redis/0001-src-Do-not-reset-FINAL_LIBS.patch b/meta-oe/recipes-extended/redis/redis/0004-src-Do-not-reset-FINAL_LIBS.patch
index 66ab0ee33..958106e26 100644
--- a/meta-oe/recipes-extended/redis/redis/0001-src-Do-not-reset-FINAL_LIBS.patch
+++ b/meta-oe/recipes-extended/redis/redis/0004-src-Do-not-reset-FINAL_LIBS.patch
@@ -1,4 +1,4 @@
1From 97584e1eb78dc18599534b47b6670c20c63f5ee2 Mon Sep 17 00:00:00 2001 1From a4d87aca1c00c53b386ee7490223971e00873add Mon Sep 17 00:00:00 2001
2From: Khem Raj <raj.khem@gmail.com> 2From: Khem Raj <raj.khem@gmail.com>
3Date: Tue, 10 Sep 2019 20:04:26 -0700 3Date: Tue, 10 Sep 2019 20:04:26 -0700
4Subject: [PATCH] src: Do not reset FINAL_LIBS 4Subject: [PATCH] src: Do not reset FINAL_LIBS
@@ -9,17 +9,17 @@ environment to get it going
9e.g. -latomic is needed on clang/x86 to provide for 64bit atomics 9e.g. -latomic is needed on clang/x86 to provide for 64bit atomics
10 10
11Upstream-Status: Pending 11Upstream-Status: Pending
12Signed-off-by: Khem Raj <raj.khem@gmail.com>
13 12
13Signed-off-by: Khem Raj <raj.khem@gmail.com>
14--- 14---
15 src/Makefile | 2 +- 15 src/Makefile | 2 +-
16 1 file changed, 1 insertion(+), 1 deletion(-) 16 1 file changed, 1 insertion(+), 1 deletion(-)
17 17
18diff --git a/src/Makefile b/src/Makefile 18diff --git a/src/Makefile b/src/Makefile
19index 5564351..83ccd76 100644 19index 35dd314..3770f96 100644
20--- a/src/Makefile 20--- a/src/Makefile
21+++ b/src/Makefile 21+++ b/src/Makefile
22@@ -91,7 +91,7 @@ endif 22@@ -93,7 +93,7 @@ endif
23 23
24 FINAL_CFLAGS=$(STD) $(WARN) $(OPT) $(DEBUG) $(CFLAGS) $(REDIS_CFLAGS) 24 FINAL_CFLAGS=$(STD) $(WARN) $(OPT) $(DEBUG) $(CFLAGS) $(REDIS_CFLAGS)
25 FINAL_LDFLAGS=$(LDFLAGS) $(REDIS_LDFLAGS) $(DEBUG) 25 FINAL_LDFLAGS=$(LDFLAGS) $(REDIS_LDFLAGS) $(DEBUG)
diff --git a/meta-oe/recipes-extended/redis/redis/GNU_SOURCE.patch b/meta-oe/recipes-extended/redis/redis/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch
index 20f689bd0..d73c66c9d 100644
--- a/meta-oe/recipes-extended/redis/redis/GNU_SOURCE.patch
+++ b/meta-oe/recipes-extended/redis/redis/0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch
@@ -1,4 +1,4 @@
1From 98d526f76049be21bf3d77158236b2189419a78e Mon Sep 17 00:00:00 2001 1From 2e6311c9c7cd85bf63eab8fe92c08ec1ec01b6fc Mon Sep 17 00:00:00 2001
2From: Khem Raj <raj.khem@gmail.com> 2From: Khem Raj <raj.khem@gmail.com>
3Date: Sat, 21 Dec 2019 12:09:51 -0800 3Date: Sat, 21 Dec 2019 12:09:51 -0800
4Subject: [PATCH] Define _GNU_SOURCE to get PTHREAD_MUTEX_INITIALIZER 4Subject: [PATCH] Define _GNU_SOURCE to get PTHREAD_MUTEX_INITIALIZER
@@ -9,6 +9,7 @@ Fixes
9| | ^~~~~~~~~~~~~~~~~~~~~~~~~ 9| | ^~~~~~~~~~~~~~~~~~~~~~~~~
10 10
11Upstream-Status: Pending 11Upstream-Status: Pending
12
12Signed-off-by: Khem Raj <raj.khem@gmail.com> 13Signed-off-by: Khem Raj <raj.khem@gmail.com>
13--- 14---
14 src/zmalloc.c | 1 + 15 src/zmalloc.c | 1 +
@@ -26,6 +27,3 @@ index 1f33d09..5e182d1 100644
26 #include <stdio.h> 27 #include <stdio.h>
27 #include <stdlib.h> 28 #include <stdlib.h>
28 #include <stdint.h> 29 #include <stdint.h>
29--
302.25.1
31
diff --git a/meta-oe/recipes-extended/redis/redis/0006-Define-correct-gregs-for-RISCV32.patch b/meta-oe/recipes-extended/redis/redis/0006-Define-correct-gregs-for-RISCV32.patch
index 9d7e50271..bb3f5c607 100644
--- a/meta-oe/recipes-extended/redis/redis/0006-Define-correct-gregs-for-RISCV32.patch
+++ b/meta-oe/recipes-extended/redis/redis/0006-Define-correct-gregs-for-RISCV32.patch
@@ -1,9 +1,10 @@
1From 26bd72f3b8de22e5036d86e6c79f815853b83473 Mon Sep 17 00:00:00 2001 1From 6149911f7a6fbaef3ed418408e2b501fa9479ffa Mon Sep 17 00:00:00 2001
2From: Khem Raj <raj.khem@gmail.com> 2From: Khem Raj <raj.khem@gmail.com>
3Date: Mon, 26 Oct 2020 21:32:22 -0700 3Date: Mon, 26 Oct 2020 21:32:22 -0700
4Subject: [PATCH] Define correct gregs for RISCV32 4Subject: [PATCH] Define correct gregs for RISCV32
5 5
6Upstream-Status: Pending 6Upstream-Status: Pending
7
7Signed-off-by: Khem Raj <raj.khem@gmail.com> 8Signed-off-by: Khem Raj <raj.khem@gmail.com>
8 9
9Updated patch for 6.2.1 10Updated patch for 6.2.1
@@ -13,10 +14,10 @@ Signed-off-by: Yi Fan Yu <yifan.yu@windriver.com>
13 1 file changed, 24 insertions(+), 2 deletions(-) 14 1 file changed, 24 insertions(+), 2 deletions(-)
14 15
15diff --git a/src/debug.c b/src/debug.c 16diff --git a/src/debug.c b/src/debug.c
16index 5318c14..8c21b47 100644 17index bb76c5d..55a0696 100644
17--- a/src/debug.c 18--- a/src/debug.c
18+++ b/src/debug.c 19+++ b/src/debug.c
19@@ -1055,7 +1055,9 @@ static void* getAndSetMcontextEip(ucontext_t *uc, void *eip) { 20@@ -1067,7 +1067,9 @@ static void* getAndSetMcontextEip(ucontext_t *uc, void *eip) {
20 #endif 21 #endif
21 #elif defined(__linux__) 22 #elif defined(__linux__)
22 /* Linux */ 23 /* Linux */
@@ -27,7 +28,7 @@ index 5318c14..8c21b47 100644
27 GET_SET_RETURN(uc->uc_mcontext.gregs[14], eip); 28 GET_SET_RETURN(uc->uc_mcontext.gregs[14], eip);
28 #elif defined(__X86_64__) || defined(__x86_64__) 29 #elif defined(__X86_64__) || defined(__x86_64__)
29 GET_SET_RETURN(uc->uc_mcontext.gregs[16], eip); 30 GET_SET_RETURN(uc->uc_mcontext.gregs[16], eip);
30@@ -1222,8 +1224,28 @@ void logRegisters(ucontext_t *uc) { 31@@ -1234,8 +1236,28 @@ void logRegisters(ucontext_t *uc) {
31 #endif 32 #endif
32 /* Linux */ 33 /* Linux */
33 #elif defined(__linux__) 34 #elif defined(__linux__)
@@ -57,6 +58,3 @@ index 5318c14..8c21b47 100644
57 serverLog(LL_WARNING, 58 serverLog(LL_WARNING,
58 "\n" 59 "\n"
59 "EAX:%08lx EBX:%08lx ECX:%08lx EDX:%08lx\n" 60 "EAX:%08lx EBX:%08lx ECX:%08lx EDX:%08lx\n"
60--
612.25.1
62
diff --git a/meta-oe/recipes-extended/redis/redis/init-redis-server b/meta-oe/recipes-extended/redis/redis/init-redis-server
index c5f335f57..c5f335f57 100755..100644
--- a/meta-oe/recipes-extended/redis/redis/init-redis-server
+++ b/meta-oe/recipes-extended/redis/redis/init-redis-server
diff --git a/meta-oe/recipes-extended/redis/redis_6.2.14.bb b/meta-oe/recipes-extended/redis/redis_6.2.16.bb
index 2433abba5..40473461a 100644
--- a/meta-oe/recipes-extended/redis/redis_6.2.14.bb
+++ b/meta-oe/recipes-extended/redis/redis_6.2.16.bb
@@ -10,19 +10,20 @@ SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \
10 file://redis.conf \ 10 file://redis.conf \
11 file://init-redis-server \ 11 file://init-redis-server \
12 file://redis.service \ 12 file://redis.service \
13 file://hiredis-use-default-CC-if-it-is-set.patch \ 13 file://0001-hiredis-use-default-CC-if-it-is-set.patch \
14 file://lua-update-Makefile-to-use-environment-build-setting.patch \ 14 file://0002-lua-update-Makefile-to-use-environment-build-setting.patch \
15 file://oe-use-libc-malloc.patch \ 15 file://0003-hack-to-force-use-of-libc-malloc.patch \
16 file://0001-src-Do-not-reset-FINAL_LIBS.patch \ 16 file://0004-src-Do-not-reset-FINAL_LIBS.patch \
17 file://GNU_SOURCE.patch \ 17 file://0005-Define-_GNU_SOURCE-to-get-PTHREAD_MUTEX_INITIALIZER.patch \
18 file://0006-Define-correct-gregs-for-RISCV32.patch \ 18 file://0006-Define-correct-gregs-for-RISCV32.patch \
19 " 19 "
20SRC_URI[sha256sum] = "34e74856cbd66fdb3a684fb349d93961d8c7aa668b06f81fd93ff267d09bc277" 20
21SRC_URI[sha256sum] = "846bff83c26d827d49f8cc8114ea9d1e72eea1169f7de36b8135ea2cec104e7d"
21 22
22inherit autotools-brokensep update-rc.d systemd useradd 23inherit autotools-brokensep update-rc.d systemd useradd
23 24
24FINAL_LIBS:x86:toolchain-clang = "-latomic" 25FINAL_LIBS:x86:toolchain-clang = "-latomic"
25FINAL_LIBS:riscv32:toolchain-clang = "-latomic" 26FINAL_LIBS:riscv32 = "-latomic"
26FINAL_LIBS:mips = "-latomic" 27FINAL_LIBS:mips = "-latomic"
27FINAL_LIBS:arm = "-latomic" 28FINAL_LIBS:arm = "-latomic"
28FINAL_LIBS:powerpc = "-latomic" 29FINAL_LIBS:powerpc = "-latomic"