Upgrade redis to 6.2.16 (#10798)

Author: realsdx

SPECS/redis/CVE-2024-31449.patch

@@ -1,5 +1,5 @@
 {
-  "Signatures": {
-    "redis-6.2.14.tar.gz": "34e74856cbd66fdb3a684fb349d93961d8c7aa668b06f81fd93ff267d09bc277"
-  }
+ "Signatures": {
+  "redis-6.2.16.tar.gz": "846bff83c26d827d49f8cc8114ea9d1e72eea1169f7de36b8135ea2cec104e7d"
+ }
 }

SPECS/redis/redis.signatures.json

@@ -1,7 +1,7 @@
 Summary:        advanced key-value store
 Name:           redis
-Version:        6.2.14
-Release:        3%{?dist}
+Version:        6.2.16
+Release:        1%{?dist}
 License:        BSD
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -10,7 +10,6 @@ URL:            https://redis.io/
 Source0:        https://download.redis.io/releases/%{name}-%{version}.tar.gz
 Patch0:         redis-conf.patch
 Patch1:         disable_active_defrag_big_keys.patch
-Patch2:         CVE-2024-31449.patch
 BuildRequires:  gcc
 BuildRequires:  make
 BuildRequires:  openssl-devel
@@ -85,6 +84,10 @@ exit 0
 %config(noreplace) %attr(0640, %{name}, %{name}) %{_sysconfdir}/redis.conf
 
 %changelog
+* Mon Oct 21 2024 Sudipta Pandit <[email protected]> - 6.2.16-1
+- Bump version to 6.2.16 (fixes CVE-2024-31228 and CVE-2024-31449)
+- Remove patch file for CVE-2024-31449
+
 * Thu Oct 10 2024 Suresh Thelkar <[email protected]> - 6.2.14-3
 - Patch for CVE-2024-31449
 

SPECS/redis/redis.spec

@@ -25604,8 +25604,8 @@
         "type": "other",
         "other": {
           "name": "redis",
-          "version": "6.2.14",
-          "downloadUrl": "https://download.redis.io/releases/redis-6.2.14.tar.gz"
+          "version": "6.2.16",
+          "downloadUrl": "https://download.redis.io/releases/redis-6.2.16.tar.gz"
         }
       }
     },