Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 589044 - dev-db/redis-3.2.5 version bump
Summary: dev-db/redis-3.2.5 version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Johan Bergström
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: CVE-2016-8339
  Show dependency tree
 
Reported: 2016-07-17 22:53 UTC by Kilburn Abrahams
Modified: 2016-11-19 11:19 UTC (History)
6 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Kilburn Abrahams 2016-07-17 22:53:21 UTC
3.2.1 contains some critical fixes for the 3.2 series.

Upgrade urgency HIGH: Critical fix to Redis Sentinel.

Reproducible: Always
Comment 1 Tiziano Müller (RETIRED) gentoo-dev 2016-08-18 15:28:52 UTC
Ok, I went along and bumped it in my overlay:

https://gitweb.gentoo.org/dev/dev-zero.git/tree/dev-db/redis

Please note: this requires either lua:5.1 (still p.masked) or luajit. I dropped support for lua:0 since I'm tired of waiting for lua-5.2
Comment 2 Thomas Deutschmann (RETIRED) gentoo-dev 2016-10-01 16:05:26 UTC
@ Tiziano:

Are you ready to bump to 3.2.4?
Comment 3 Thomas Deutschmann (RETIRED) gentoo-dev 2016-11-18 16:27:10 UTC
*ping* - Any updates? Remember that the REDIS version in the Gentoo repository is still vulnerable to a remote code execution...
Comment 4 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2016-11-18 23:27:59 UTC
In the tree now:
3.2.5: includes luajit support, non-slotted lua.
3.2.5-r1: is from dev-zero's build (in p.mask for slotted lua).

proxy-maintainers:
I think the proxy maintainer should be marked as awol.
Comment 5 Ultrabug gentoo-dev 2016-11-19 11:19:58 UTC
Johan I removed you from the metadata, if it feels wrong to you, ping me mate.