Package: release.debian.org Severity: normal Tags: bookworm User: release.debian....@packages.debian.org Usertags: pu
Dear stable release managers, Please consider redis (5:7.0.11-1+deb12u1) for bookworm: redis (5:7.0.11-1+deb12u1) bookworm; urgency=medium . * Drop ProcSubset=pid hardening flag from the systemd unit files it causes difficult-to-reproduce crashes with memory allocation errors. A big thanks to Arnaud Rebillout <arna...@kali.org> for the extensive investigation. (Closes: #1055039) * Update debian/gbp.conf for the debian/bookworm branch. The full diff is attached. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
diff --git a/debian/changelog b/debian/changelog index 2c77a5d1..2f74a30f 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,13 @@ +redis (5:7.0.11-1+deb12u1) bookworm; urgency=medium + + * Drop ProcSubset=pid hardening flag from the systemd unit files it causes + difficult-to-reproduce crashes with memory allocation errors. A big thanks + to Arnaud Rebillout <arna...@kali.org> for the extensive investigation. + (Closes: #1055039) + * Update debian/gbp.conf for the debian/bookworm branch. + + -- Chris Lamb <la...@debian.org> Thu, 02 Nov 2023 15:24:45 +0100 + redis (5:7.0.11-1) unstable; urgency=high * New upstream security release: diff --git a/debian/bin/generate-systemd-service-files b/debian/bin/generate-systemd-service-files index b1e43c86..c7eafabe 100755 --- a/debian/bin/generate-systemd-service-files +++ b/debian/bin/generate-systemd-service-files @@ -96,7 +96,6 @@ LockPersonality=true MemoryDenyWriteExecute=true NoNewPrivileges=true PrivateUsers=true -ProcSubset=pid ProtectClock=true ProtectControlGroups=true ProtectHostname=true diff --git a/debian/gbp.conf b/debian/gbp.conf index 24e95b17..14717f8e 100644 --- a/debian/gbp.conf +++ b/debian/gbp.conf @@ -1,3 +1,3 @@ [DEFAULT] -debian-branch=debian/sid -upstream-branch=upstream/sid +debian-branch=debian/bookworm +upstream-branch=upstream/bookworm