package/hiredis: security bump to version 0.14.1
authorFabrice Fontaine <fontaine.fabrice@gmail.com>
Sat, 28 Mar 2020 08:52:30 +0000 (09:52 +0100)
committerThomas Petazzoni <thomas.petazzoni@bootlin.com>
Sat, 28 Mar 2020 13:25:29 +0000 (14:25 +0100)
- Fix CVE-2020-7105: async.c and dict.c in libhiredis.a in hiredis
  through 0.14.0 allow a NULL pointer dereference because malloc return
  values are unchecked.
- Update indentation of hash file (two spaces)

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
package/hiredis/hiredis.hash
package/hiredis/hiredis.mk

index 709fff863901f994be1db077cfaada836de1cfa1..2d50ce0f544ea29e87f724af54ba46b2e6eae15c 100644 (file)
@@ -1,3 +1,3 @@
 # Locally computed:
-sha256 042f965e182b80693015839a9d0278ae73fae5d5d09d8bf6d0e6a39a8c4393bd        hiredis-0.14.0.tar.gz
-sha256 dca05ce8fc87a8261783b4aed0deef8becc9350b6aa770bc714d0c1833b896eb        COPYING
+sha256  2663b2aed9fd430507e30fc5e63274ee40cdd1a296026e22eafd7d99b01c8913  hiredis-0.14.1.tar.gz
+sha256  dca05ce8fc87a8261783b4aed0deef8becc9350b6aa770bc714d0c1833b896eb  COPYING
index 06d2f4de68840932645e407b86efdb81b06c63a1..02055b05d43281cbc71da48a7d8a141d2e8035c7 100644 (file)
@@ -5,7 +5,7 @@
 ################################################################################
 
 HIREDIS_VERSION_MAJOR = 0.14
-HIREDIS_VERSION = $(HIREDIS_VERSION_MAJOR).0
+HIREDIS_VERSION = $(HIREDIS_VERSION_MAJOR).1
 HIREDIS_SITE = $(call github,redis,hiredis,v$(HIREDIS_VERSION))
 HIREDIS_LICENSE = BSD-3-Clause
 HIREDIS_LICENSE_FILES = COPYING