-
redis (5:5.0.3-4ubuntu0.1) disco-security; urgency=high
* SECURITY UPDATE: heap buffer overflows in Hyperloglog (Closes: #1836496)
- debian/patches/CVE-2019-10192.patch: Fix hyperloglog corruption
- CVE-2019-10192
* SECURITY UPDATE: stack buffer overflow in Hyperloglog functionality
- debian/patches/CVE-2019-10193.patch: enlarge reghisto variable for safety
- CVE-2019-10193
-- Julian Andres Klode <email address hidden> Sun, 14 Jul 2019 21:05:06 +0200
-
redis (5:5.0.3-4) unstable; urgency=medium
[ Helmut Grohne ]
* Fix cross build failure by building the non-bundled Lua libraries via
dh_auto_build. (Closes: #919682)
-- Chris Lamb <email address hidden> Sun, 20 Jan 2019 22:23:41 +0000
-
redis (5:5.0.3-3) unstable; urgency=medium
* Fix FTBFS on hurd-i386 by updating patch to aof.c to avoid MAXPATHLEN
reference.
* debian/control:
- Add missing Pre-Depends on ${misc:Pre-Depends}.
- Bump Standards-Version to 4.3.0.
* Bump debhelper compat level to 12.
-- Chris Lamb <email address hidden> Tue, 01 Jan 2019 17:47:28 +0000
-
redis (5:5.0.3-2) unstable; urgency=medium
* Pass --no-as-needed to ensure linking to the Lua libraries on systems with
--as-needed as the default. (Closes: #916831)
-- Chris Lamb <email address hidden> Fri, 21 Dec 2018 13:18:37 +0000
-
redis (5:5.0.3-1) unstable; urgency=medium
* New upstream release.
- Drop 0009-Don-t-treat-unsupported-protocols-as-fatal-errors.patch as it
was merged upstream.
- Refresh all patches.
-- Chris Lamb <email address hidden> Tue, 18 Dec 2018 23:48:16 +0000
-
redis (5:5.0.2-1) unstable; urgency=medium
* New upstream release.
-- Chris Lamb <email address hidden> Sun, 25 Nov 2018 19:04:10 +0100
-
redis (5:5.0.1-2) unstable; urgency=medium
* Refresh patches.
* Ensure that lack of IPv6 support does not prevent Redis from starting on
Debian where we bind to the ::1 interface by default. (Closes: #900284,
#914354)
-- Chris Lamb <email address hidden> Fri, 23 Nov 2018 18:03:53 +0100
-
redis (5:5.0.1-1) unstable; urgency=medium
* New upstream release.
* Ensure that Debian-supplied Lua libraries are available using "require"
during Lua scripting to prevent an issue where we could not use the (eg.)
cjson library anymore library anymore. This was a regression introduced in
5:5.0~rc4-3. Thanks to Nicolas Le Manchet <email address hidden> for the
report and testcase. (Closes: #913185)
* Refer to /run directly in .service files; /var/run is now merely a symlink
pointing to /run and thus it is now considered best practice to use /run
directly.
* debian/rules:
- Document why we run make in the deps/lua/src directory.
- Add documentation for LUA_LIBS_{DEBIAN,BUNDLED}.
- Call $(MAKE) instead of "make".
- Re-order targets to match usual order.
-- Chris Lamb <email address hidden> Sun, 11 Nov 2018 20:09:51 +0100
-
redis (5:5.0.0-2) unstable; urgency=medium
* Update our patch to sentinel.conf to ensure the correct runtime PID file
location. (Closes: #911407)
* Listen on ::1 interfaces too for redis-sentinel to match redis-server.
* Also run the new "LOLWUT" command in the redis-cli autopkgtest.
-- Chris Lamb <email address hidden> Fri, 19 Oct 2018 22:36:40 -0400
-
redis (5:4.0.11-2) unstable; urgency=medium
* Revert "Move to debhelper-compat (= 11) in Build-Depends." as dak will
REJECT with "missing-build-dependency debhelper".
-- Chris Lamb <email address hidden> Mon, 06 Aug 2018 11:42:41 +0800