From 92f8db870c60bba1acdf2b469ed70a91e47851bf Mon Sep 17 00:00:00 2001 From: Mario Rodas Date: Mon, 20 Mar 2023 04:20:00 +0000 Subject: [PATCH] redis: 7.0.9 -> 7.0.10 Security Fixes: - (CVE-2023-28425) Specially crafted MSETNX command can lead to assertion and denial-of-service https://github.com/redis/redis/releases/tag/7.0.10 --- pkgs/servers/nosql/redis/default.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/servers/nosql/redis/default.nix b/pkgs/servers/nosql/redis/default.nix index 2f43e2c402ba..af7466c103b3 100644 --- a/pkgs/servers/nosql/redis/default.nix +++ b/pkgs/servers/nosql/redis/default.nix @@ -7,11 +7,11 @@ stdenv.mkDerivation rec { pname = "redis"; - version = "7.0.9"; + version = "7.0.10"; src = fetchurl { url = "https://download.redis.io/releases/${pname}-${version}.tar.gz"; - hash = "sha256-93E1wqR8kVHUAov+o7NEcKtNMk0UhPeahMbzKjz7n2U="; + hash = "sha256-He5MZIc0HK571kMv91kJBlIiFaBh/e+Hx9BAoMtgATE="; }; patches = [