{"id":2221695,"url":"http://patchwork.ozlabs.org/api/1.2/patches/2221695/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/patch/20260410061924.1759312-1-titouan.christophe@mind.be/","project":{"id":27,"url":"http://patchwork.ozlabs.org/api/1.2/projects/27/?format=json","name":"Buildroot development","link_name":"buildroot","list_id":"buildroot.buildroot.org","list_email":"buildroot@buildroot.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260410061924.1759312-1-titouan.christophe@mind.be>","list_archive_url":null,"date":"2026-04-10T06:19:23","name":"[1/2] package/redis: security bump to v8.4.2","commit_ref":null,"pull_url":null,"state":"accepted","archived":false,"hash":"70dbe2841f4989299dd378b8bdea90f7cbf6482b","submitter":{"id":90763,"url":"http://patchwork.ozlabs.org/api/1.2/people/90763/?format=json","name":"Titouan Christophe","email":"titouan.christophe@mind.be"},"delegate":{"id":89618,"url":"http://patchwork.ozlabs.org/api/1.2/users/89618/?format=json","username":"juju","first_name":"Julien","last_name":"Olivain","email":"juju@cotds.org"},"mbox":"http://patchwork.ozlabs.org/project/buildroot/patch/20260410061924.1759312-1-titouan.christophe@mind.be/mbox/","series":[{"id":499403,"url":"http://patchwork.ozlabs.org/api/1.2/series/499403/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/list/?series=499403","date":"2026-04-10T06:19:23","name":"[1/2] package/redis: security bump to v8.4.2","version":1,"mbox":"http://patchwork.ozlabs.org/series/499403/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2221695/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2221695/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=piTZRo7h;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fsRVZ48n4z1y2d\n\tfor ;\n Fri, 10 Apr 2026 16:20:05 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 89754401AF;\n\tFri, 10 Apr 2026 06:20:02 +0000 (UTC)","from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id Lm-ND0RDQy0d; Fri, 10 Apr 2026 06:20:01 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id 8B6D0402B5;\n\tFri, 10 Apr 2026 06:20:01 +0000 (UTC)","from smtp2.osuosl.org (smtp2.osuosl.org [IPv6:2605:bc80:3010::133])\n by lists1.osuosl.org (Postfix) with ESMTP id 0EE7F237\n for ; Fri, 10 Apr 2026 06:20:00 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp2.osuosl.org (Postfix) with ESMTP id CE9B54030F\n for ; Fri, 10 Apr 2026 06:19:57 +0000 (UTC)","from smtp2.osuosl.org ([127.0.0.1])\n by localhost (smtp2.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id uGJJLC9Qm3lE for ;\n Fri, 10 Apr 2026 06:19:57 +0000 (UTC)","from mail-wr1-x42b.google.com (mail-wr1-x42b.google.com\n [IPv6:2a00:1450:4864:20::42b])\n by smtp2.osuosl.org (Postfix) with ESMTPS id B321340313\n for ; Fri, 10 Apr 2026 06:19:56 +0000 (UTC)","by mail-wr1-x42b.google.com with SMTP id\n ffacd0b85a97d-43d0deb7ad5so1216318f8f.2\n for ; Thu, 09 Apr 2026 23:19:56 -0700 (PDT)","from dragon (ptr-94-109-198-162.dyn.orange.be. [94.109.198.162])\n by smtp.gmail.com with ESMTPSA id\n ffacd0b85a97d-43d63e5c98fsm5182837f8f.35.2026.04.09.23.19.53\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Thu, 09 Apr 2026 23:19:53 -0700 (PDT)"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp4.osuosl.org 8B6D0402B5","OpenDKIM Filter v2.11.0 smtp2.osuosl.org B321340313"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1775802001;\n\tbh=iCp/b2LeUv78M+PO60AOJx5XkgG5W8YZ0bMje5iH9rU=;\n\th=To:Cc:Date:Subject:List-Id:List-Unsubscribe:List-Archive:\n\t List-Post:List-Help:List-Subscribe:From:Reply-To:From;\n\tb=piTZRo7htTiFkWgPjDYYkTZ/o/7WVlL+sMHHPi+4TR2v2K1CUwnH4aBQvUb7XbOhW\n\t mA7QYDoGdMjOsNrQ68c8pVrowCKRhNcWxiDeHxyhmOcFXcbcI3/5LiIpIti+MkxcP/\n\t GY1XTjnjglsYszadnVOt/Bo6hThbsPMlCvsQLOgf18mxO8sgl8DFx9qMmWcXi27bGH\n\t CdVE9ScNa4f7kEChsihoP1fuJ83wUHbLFkQxn9h91KyS+evY/4JXhJ69JqXa/Ia8y9\n\t rhqvEa8ci8hjs3QAkAjcJBoq2P1uWiha9HaD19/C36uwyWZWdxBKM15GsAtM0/uJxR\n\t 9ZTUtYwPkYTew==","Received-SPF":"Pass (mailfrom) identity=mailfrom;\n client-ip=2a00:1450:4864:20::42b; helo=mail-wr1-x42b.google.com;\n envelope-from=titouan.christophe@essensium.com; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp2.osuosl.org B321340313","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1775801994; x=1776406794;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=uQpH/FCwlr6wNnkswoVmcjA4MUwAlQ+4DrKwwm9pXhg=;\n b=pVs1MCZh3s1tKHnBlCauLnqhj6PMOZvYp9JFRvGRslsn8w+cYJsu1aCaR/bH0Dl/Fc\n sC1hgRkjmpRalC6sElkw+qpqlfd4dQmvRWIveR8QZ2kzyKevR2fTxrmpNmiT07Y19tq7\n d9qIx04vwex+Bg/MZrq1yABws/e5biBSDyeiTuZPc5Rxu7V5JTONGN4GD+v6wn/BdCIX\n +2XZ6qSXnEBVzL4dpkk15d3EI2Kg80q9sWHh0tAxcC9gXRw6ckCxgCTGiAoAaNynvKL6\n HK33mp72CaszefI+2c/gHCTnXvw3bb+XTYK810/SgwK+1j+0+slL/7V/jaimjBelLwRj\n ScIA==","X-Gm-Message-State":"AOJu0YxzuyoXSC3d4bTMYrF+yNvA1cTsbdNlcsJAOEzVW+oUYGnjvfko\n ftDIjeEqZel1Zj9gHI32hFaL0pOAfRJIVijUPUNEYK0H3Q+d4Xg+j6ccBrI88x9eLwHdU9Y79/g\n jp0KW","X-Gm-Gg":"AeBDievIBGyp/8dG0wikGrmDNS7dz3svP7qJOR3E8wPtL40qXCI1+NYLqhsXUEywY/l\n kSvcderSlcsZhu+K8SN1qVoMR5m3XUz/uh6pclwe3LBFqhL7UVAWlT7oFlrsmiC5yadSU8iLVdR\n QQQ+Ttdaw/wEvRYuBKvEtObMMhxVGzQhD85FnTXZGfM8tWjCdDJDqP7P9xLuDlbYurwp2al23q1\n 2Y9Dfs2IU1Mo0YTN9zcKXHEWeYQfqhtiLNWEPnTXwf26s3c0EasUF0PBP9yzOhmKMk6yCWnYrHM\n Ljn2lxWkua3vTZEllxMUjz5DEDtafNB4WLGLQuXNcQ6AZVcYdHLr+Tf7EAq/ibVdBE1+O/m4jzI\n XC7GeU9jmgpQ3dr1YoqWQLzrPSvRrlWTdloC9hOYdUSAp8HBQFK4bwJztxkwrMQmDIbesQ7h0EX\n 7dEKTljwE9ho+MWtH6piQJK6B1zZ01lhNMYEOGIIeR6TmBEmXdVEcXeZz6T1JK","X-Received":"by 2002:a5d:588c:0:b0:43d:1b3c:83bc with SMTP id\n ffacd0b85a97d-43d642bb20dmr2586273f8f.48.1775801994018;\n Thu, 09 Apr 2026 23:19:54 -0700 (PDT)","To":"buildroot@buildroot.org","Cc":"Daniel Price ","Date":"Fri, 10 Apr 2026 08:19:23 +0200","Message-ID":"<20260410061924.1759312-1-titouan.christophe@mind.be>","X-Mailer":"git-send-email 2.53.0","MIME-Version":"1.0","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=mind.be; s=google; t=1775801994; x=1776406794; darn=buildroot.org;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:from:to:cc:subject:date:message-id:reply-to;\n bh=uQpH/FCwlr6wNnkswoVmcjA4MUwAlQ+4DrKwwm9pXhg=;\n b=dKugax4qgnA0tckjhYjTDaUCDCy8v+adGDbeycuNIBlIeF6bxFhMhL8c7ct8O8Qm5C\n uBXqPclgzG6+LgZd9qPwIV3qN9NOo/1pZJAYMBHgHfakNyup20ze1a0Hs/AwqiXSmXIX\n MqhvvTaC97/2LYbilbm5Pw8cz7Is0Zl5Z9rja+Jo8NfLfSTC6RRF3tHU+YmPrWorAikn\n 3brr9fBGgtnOMrDNIAq94DhCncn/x1Efr2KVJXtDXCWqSc94AreoOvxWj7aCZNJdDMjR\n tHq+VCwcuN0ccCvEiSkotwVfcydpnnan3y0MMEKC4+rV/qdcNYbJznNmqBgn8zufbJd3\n Vb3A==","X-Mailman-Original-Authentication-Results":["smtp2.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=mind.be","smtp2.osuosl.org;\n dkim=pass (2048-bit key) header.d=mind.be header.i=@mind.be\n header.a=rsa-sha256 header.s=google header.b=dKugax4q"],"Subject":"[Buildroot] [PATCH 1/2] package/redis: security bump to v8.4.2","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Titouan Christophe via buildroot ","Reply-To":"Titouan Christophe ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "},"content":"See the release notes:\nhttps://github.com/redis/redis/blob/8.4.2/00-RELEASENOTES\n\n================================================================================\nRedis 8.4.2 Released Mon 23 Feb 2026 10:00:00 IST\n================================================================================\n\nSECURITY: There is a security fix in the release\n\n- A user can manipulate data read by a connection by injecting \\r\\n sequences\n into a Redis error reply\n\n================================================================================\nRedis 8.4.1 Released Sun 8 Feb 2026 9:00:00 IST\n================================================================================\n\nUpdate urgency: `SECURITY`: There are security fixes in the release.\n\n- #T1837, #J1474 Hide Personally Identifiable Information from server log\n- #P936 Cuckoo filter: crash on RDB load on 0 buckets (MOD-11593)\n- #P945 Bloom filter: crash on RDB load on large number of filters (MOD-11590)\n\n(And a whole lot of other bugfixes)\n\nSigned-off-by: Titouan Christophe \n---\n package/redis/redis.hash | 2 +-\n package/redis/redis.mk | 2 +-\n 2 files changed, 2 insertions(+), 2 deletions(-)","diff":"diff --git a/package/redis/redis.hash b/package/redis/redis.hash\nindex 1ac1b1764d..e690dd1eaa 100644\n--- a/package/redis/redis.hash\n+++ b/package/redis/redis.hash\n@@ -1,5 +1,5 @@\n # From https://github.com/redis/redis-hashes/blob/master/README\n-sha256 ca909aa15252f2ecb3a048cd086469827d636bf8334f50bb94d03fba4bfc56e8 redis-8.4.0.tar.gz\n+sha256 0e7c150919e10c630d6e806fa7e65ce12aa90ddd0805e459b7da64ee65892805 redis-8.4.2.tar.gz\n \n # Locally calculated\n sha256 4a0e416b9537688f30dfe69ddaceb2ca64d96b7df02a0a6760d376890ddc4e40 LICENSE.txt\ndiff --git a/package/redis/redis.mk b/package/redis/redis.mk\nindex 36a13a34ef..fb166b6f49 100644\n--- a/package/redis/redis.mk\n+++ b/package/redis/redis.mk\n@@ -4,7 +4,7 @@\n #\n ################################################################################\n \n-REDIS_VERSION = 8.4.0\n+REDIS_VERSION = 8.4.2\n REDIS_SITE = http://download.redis.io/releases\n REDIS_LICENSE = \\\n \tAGPL-3.0 or SSPL-1.0 or RSAL-2.0 (core); \\\n","prefixes":["1/2"]}