-
Notifications
You must be signed in to change notification settings - Fork 1.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
1.0.1 release bumps SONAME unnecessarily #990
Comments
I've prepared In terms of #991, my preference would be to bump the Also see #987 Edit: cc @rgacogne just so you are aware you don't need to patch packages if you use 1.0.2 |
Agree, for #991 should have been targeted at the release/v1.0.2 branch rather than This issue can be closed once v1.0.2 gets released. I'll then look at packaging it for openSUSE Tumbleweed |
Thank you @michael-grunder for fixing the SONAME issue. v1.0.2 package is available on openSUSE Tumbleweed. |
Thanks @michael-grunder for fixing the issue and for notifying me, much appreciated! |
The 1.0.1 release fixes CVE-2021-32765 by changing the internals of a function. The ABI remains untouched, hence the 1.0.1 release didn't need to change the SONAME.
8d1bfac#r57634172
Let's put HIREDIS_SONAME back to 1.0.0 and release as 1.0.2. This will allow binaries that have linked against /usr/lib64/libhiredis.so.1.0.0 to get the CVE fix with a drop-in upgrade that avoids the need to rebuild programs that link against hiredis.
The text was updated successfully, but these errors were encountered: