Files
buildroot/package/redis
Titouan Christophe 896e19a5c6 package/redis: security bump to v8.2.3
See the release notes: https://github.com/redis/redis/releases/tag/8.2.3

This fixes the following vulnerability:
- CVE-2025-62507:
    Redis is an open source, in-memory database that persists on disk. In
    versions 8.2.0 and above, a user can run the XACKDEL command with
    multiple ID's and trigger a stack buffer overflow, which may
    potentially lead to remote code execution. This issue is fixed in
    version 8.2.3. To workaround this issue without patching the redis-
    server executable is to prevent users from executing XACKDEL
    operation. This can be done using ACL to restrict XACKDEL command.
    https://www.cve.org/CVERecord?id=CVE-2025-62507

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-11-17 21:09:58 +01:00
..