hiredis: update to 1.4.1

Security fix release; hiredis 1.4.x users are recommended to upgrade.

- prevent arbitrarily nested replies from causing a stack overflow
  (PR #1340)
- protect against overflow of map elements (PR #1341)

Both issues were found by He Huang (Swinburne University of Technology)
using NexusSan fuzzing.

Signed-off-by: Daniel Golle <redacted>

diff --git a/libs/hiredis/Makefile b/libs/hiredis/Makefile
index 876b844c4d758c2ff302895385bf5b642833cedc..b20b4bb70dea7f562033df3691fa4575feae7508 100644 (file)
--- a/libs/hiredis/Makefile
+++ b/libs/hiredis/Makefile
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=hiredis
-PKG_VERSION:=1.4.0
+PKG_VERSION:=1.4.1
 PKG_RELEASE:=1
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://codeload.github.com/redis/hiredis/tar.gz/v$(PKG_VERSION)?
-PKG_HASH:=5fa6e719e59cd4f8ae435c52a18ac4035d135251f9ee54e7a045bccf59107ed8
+PKG_HASH:=ca3180359a8b1275838a45415851f8cd5c411e27bdbf18f4823012e45507d2e4
 
 PKG_LICENSE:=BSD-3-Clause
 PKG_LICENSE_FILES:=COPYING