Files
rpi-buildroot/package/redis
Titouan Christophe bdd3382ea5 package/redis: security bump to v7.2.10
This fixes the following vulnerabilities:

- CVE-2025-32023:
    An authenticated user may use a specially crafted string to trigger a
    stack/heap out of bounds write on hyperloglog operations, potentially
    leading to remote code execution.
    https://github.com/redis/redis/security/advisories/GHSA-rp2m-q4j6-gr43

- CVE-2025-48367:
    An unauthenticated connection can cause repeated IP protocol errors,
    leading to client starvation and, ultimately, a denial of service.
    https://github.com/redis/redis/security/advisories/GHSA-4q32-c38c-pwgq

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
(cherry picked from commit c87ddd6ee4)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2025-07-11 14:07:36 +02:00
..