redis: ignore CVE-2025-21605

The fix has been backported to both redis versions by upstream, and
both versions contain it already.

For 6.2.20 [1] contains the backported fix.

For 7.2.11 [2] contains the backported fix.

[1]: 5e93f9cb9d
[2]: 42fb340ce4

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Gyorgy Sarvari 2025-10-07 11:11:15 +02:00 committed by Khem Raj
parent 5eae418a2e
commit 2ef9c8762d
No known key found for this signature in database
GPG Key ID: BB053355919D3314
2 changed files with 4 additions and 0 deletions

View File

@ -20,6 +20,8 @@ SRC_URI = "http://download.redis.io/releases/${BP}.tar.gz \
SRC_URI[sha256sum] = "7f8b8a7aed53c445a877adf9e3743cdd323518524170135a58c0702f2dba6ef4"
CVE_STATUS[CVE-2025-21605] = "cpe-incorrect: the used version already contains the fix"
inherit update-rc.d systemd useradd
FINAL_LIBS:x86:toolchain-clang = "-latomic"

View File

@ -21,6 +21,8 @@ SRC_URI[sha256sum] = "2f9886eca68d30114ad6a01da65631f8007d802fd3e6c9fac711251e63
RPROVIDES:${PN} = "virtual-redis"
CVE_STATUS[CVE-2025-21605] = "cpe-incorrect: the used version already contains the fix"
inherit pkgconfig update-rc.d systemd useradd
FINAL_LIBS:x86:toolchain-clang = "-latomic"