CVS commit: pkgsrc/databases/redis

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon May 11 15:55:42 UTC 2026

Modified Files:
        pkgsrc/databases/redis: Makefile distinfo

Log Message:
redis: updated to 8.6.3

Redis 8.6.3    Released Tue 5 May 2026 16:00:00 IST

Update urgency: `SECURITY`: There are security fixes in the release.

Security fixes

- (CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution.
- (CVE-2026-25243) Invalid memory access in `RESTORE` may lead to Remote Code Execution
- (CVE-2026-23631) Lua Use-After-Free may lead to remote code execution
- (CVE-2026-25588) Invalid memory access in `RESTORE` may lead to Remote Code Execution (Time Series)
- (CVE-2026-25589) Invalid memory access in `RESTORE` may lead to Remote Code Execution (Probabilistic)

Bug fixes

- `SUBSCRIBE`, `PSUBSCRIBE`, `SSUBSCRIBE`: crash on OOM (RED-167788)
- `CONFIG SET`: some settings allow invalid characters (RED-167787)
- `SCRIPT DEBUG`: potential crash on scripts (RED-175507)
- `VADD`: crash or buffer overflow on large `REDUCE` value (RED-170921)
- `VSET`: crash on huge allocations (MOD-12678)
- Potential crash on disconnections and TLS failures (Time Series) (MOD-14850)
- Q8745 Crash when many keys receive expirations under heavy TTL activity (MOD-14500)
- Q8848 HNSW vector index memory growth under high-churn workloads until shard restart (MOD-13761)
- Q8205, Q8259 `FT.HYBRID` `VSIM RANGE` + `FILTER` incorrectly returns zero results (MOD-12370, MOD-13884)
- Q9182 `FT.PROFILE HYBRID` returns an empty reply (MOD-14778)
- Q8129, Q8140 `FT.PROFILE` reports an incorrect shard total profile time (MOD-13735, MOD-13181)
- Q9047 `FT.PROFILE` output is inconsistent when a profiled value is missing (MOD-10560)
- Q8791 `FT.EXPLAIN` does not lock, causing a race with concurrent index changes (MOD-14461)
- Q8382 Crash when indexing negative zero (-0.0) (MOD-13904)
- Q8590 `FILTER` returns inconsistent results with multiple indexes sharing field aliases (MOD-14063)
- Q8660 `FILTER` behavior depends on property order in the expression (MOD-14065)
- Q8593 Filter expressions are evaluated for indexes that do not match the document type (MOD-14064)
- Q8591 Documents are inconsistently included or excluded depending on the indexing path taken (MOD-13948)
- Q8589 `RENAME` notification handler loads the wrong key, causing stale index entries after a rename (MOD-14328)
- Q9012 `PERSIST` and `HPERSIST` notifications are not reflected in index expiration tracking (MOD-14800)
- Q9079 `FT.SPELLCHECK` treats `PARAMS` placeholders as literal terms instead of resolving them (MOD-10596)
- Q8462 GC out-of-memory on replica shards leaves the replica in an inconsistent state (MOD-14066)
- Q9066 Race condition in `FT.HYBRID` causes intermittent failures under concurrent hybrid query load (MOD-14732)
- Q8109, Q8149 Configuration registration omits module parameters, causing them to be unexposed or misapplied (RED-171841)
- Q9163 Crash on `FT.SEARCH` when topology validation fails (for example, some nodes unreachable) (MOD-14475)
- Q8395 `FT.SEARCH` fails with "Query requires unavailable slots" after shard restart or failover (MOD-13828)
- Q8451 `FT.INFO`-style output no longer reports zero-index summary data when no indices exist (MOD-14079)
- Q9078 `FT.CREATE` now rejects schema definitions with invalid option combinations at creation time (MOD-14655)
- Q8051, Q8114 Crash diagnostics now include the `IndexSpec` of the index the failing thread was working on (MOD-7574)

Metrics

- Q8210, Q8231 `FT.PROFILE`: added queue time tracking (MOD-13602)


To generate a diff of this commit:
cvs rdiff -u -r1.102 -r1.103 pkgsrc/databases/redis/Makefile
cvs rdiff -u -r1.92 -r1.93 pkgsrc/databases/redis/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/databases/redis/Makefile
diff -u pkgsrc/databases/redis/Makefile:1.102 pkgsrc/databases/redis/Makefile:1.103
--- pkgsrc/databases/redis/Makefile:1.102       Tue Apr 21 04:53:47 2026
+++ pkgsrc/databases/redis/Makefile     Mon May 11 15:55:42 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.102 2026/04/21 04:53:47 adam Exp $
+# $NetBSD: Makefile,v 1.103 2026/05/11 15:55:42 adam Exp $
 
-DISTNAME=      redis-8.6.2
+DISTNAME=      redis-8.6.3
 CATEGORIES=    databases
 MASTER_SITES=  http://download.redis.io/releases/
 

Index: pkgsrc/databases/redis/distinfo
diff -u pkgsrc/databases/redis/distinfo:1.92 pkgsrc/databases/redis/distinfo:1.93
--- pkgsrc/databases/redis/distinfo:1.92        Tue Apr 21 04:53:47 2026
+++ pkgsrc/databases/redis/distinfo     Mon May 11 15:55:42 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.92 2026/04/21 04:53:47 adam Exp $
+$NetBSD: distinfo,v 1.93 2026/05/11 15:55:42 adam Exp $
 
-BLAKE2s (redis-8.6.2.tar.gz) = 339303b85ebd88424108f30df32b64d08b53d76184289c0d3b2739cf267bd01d
-SHA512 (redis-8.6.2.tar.gz) = 8070b841ed10663a007796c2c480d6972333bbc398d1e02f34ca49293e9731b2f24c3b609b4a90fa8bf24302a5e0466711752ed80e62bb772636d39f8e3704d1
-Size (redis-8.6.2.tar.gz) = 4245565 bytes
+BLAKE2s (redis-8.6.3.tar.gz) = 7a9141d1cc012da02699cf4a5585ffbb93aaedb00c10dc483aab4060523a9e9b
+SHA512 (redis-8.6.3.tar.gz) = 2f7e339427d6ac47d4d5c601ccb36c27a44474549fdf33fe5c0acb275f7b03822a4bd5c9bdf7b5f85c6089d201ac2a182a205c756103595540c67a27f2d8899c
+Size (redis-8.6.3.tar.gz) = 4252312 bytes
 SHA1 (patch-redis.conf) = a16fd0c559c9fbe0237b719d92a59259ae19c41a
 SHA1 (patch-src_Makefile) = a2817ec27efc11b11e77b4ed310a7dec7e1d39d4
 SHA1 (patch-src_hyperloglog.c) = 86d138b76271cc035b9fa28b0b5c3462430cd950