CVS commit: pkgsrc/databases/redis

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Aug 20 07:52:07 UTC 2026

Modified Files:
        pkgsrc/databases/redis: Makefile distinfo

Log Message:
redis: updated to 8.10.1

Redis 8.10.1    Released Mon 17 Aug 2026 10:00:00 IST

Update urgency: `SECURITY`: There are security fixes in the release.

Security fixes

- (CVE-2026-62356) Miscalculated buffer size in `CMSketch` RDB loading may lead to heap OOB write
- Out-of-bounds access in TopK heap cleanup path (MOD-15410)
- Use-after-free in the TLS pending-data list when a command closes another pending connection
- A malicious RDB payload with an out-of-range `SLOT_INFO` slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution
- Vector Sets: missing node level validation when loading a vector set from RDB may lead to out-of-bounds access
- Vector Sets: use-after-free when `VREM` mutates the HNSW graph while background `VSIM` threads are still running
- Vector Sets: a negative `hnsw_search()` return was treated as a huge unsigned count, reading past the end of the result arrays
- TLS client certificate authentication bypass: a Common Name containing an embedded NUL byte was truncated, allowing a client to authenticate as another (possibly privileged) ACL user
- Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key

Redis 8.10 GA   Released Wed 29 Jul 2026 21:00:00 IST

This is the General Availability release of Redis 8.10 in Redis Open Source.

Major changes compared to 8.8

- Compact hashes - a new hash encoding that reduces memory usage by storing hash field names just once for keys that share a schema
- New command: `HIMPORT` - high-throughput compact hash bulk insertion
- TLS peer certificate-based server-to-server authentication
- New commands: `LMOVEM`, `BLMOVEM` - move multiple elements between lists
- New command: `SUNIONCARD` - get the cardinality of the union of multiple sets
- New command: `SDIFFCARD` - get the cardinality of the difference between sets
- New command: `BACKUP` - node-side implementation for backup and restore based on multi-part AOF (MP-AOF)
- `XREAD`, `XREADGROUP` - new `MAXCOUNT` and `MAXSIZE` arguments to cap the cumulative reply entries and size
- New command: `FT.ALIASLIST` - get all aliases for the index
- Stemmer support for Malay and Tagalog languages
- JSONPath extensions
- New commands: `TS.NRANGE`, `TS.NREVRANGE` - Query a range across multiple time series; group results by timestamp
- New command: `TS.READ` - optionally blocking read
- New command: `TS.QUERYLABELS` - Get a list of labels and label-values
- New command: `TS.MRANGE`, `TS.MREVRANGE` - new `EXCLUDEEMPTY` argument to exclude series with no reported samples
- Performance improvements


To generate a diff of this commit:
cvs rdiff -u -r1.104 -r1.105 pkgsrc/databases/redis/Makefile
cvs rdiff -u -r1.94 -r1.95 pkgsrc/databases/redis/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/databases/redis/Makefile
diff -u pkgsrc/databases/redis/Makefile:1.104 pkgsrc/databases/redis/Makefile:1.105
--- pkgsrc/databases/redis/Makefile:1.104       Tue May 26 05:39:34 2026
+++ pkgsrc/databases/redis/Makefile     Thu Aug 20 07:52:06 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.104 2026/05/26 05:39:34 adam Exp $
+# $NetBSD: Makefile,v 1.105 2026/08/20 07:52:06 adam Exp $
 
-DISTNAME=      redis-8.8.0
+DISTNAME=      redis-8.10.1
 CATEGORIES=    databases
 MASTER_SITES=  http://download.redis.io/releases/
 
@@ -60,7 +60,9 @@ SUBST_VARS.fix-paths=         REDIS_DATADIR RED
 
 CHECK_PORTABILITY_SKIP+=       deps/jemalloc/configure
 
+# Don't build modules. These require cmake, clang and rust.
 post-extract:
+       ${RM} -f -r ${WRKSRC}/modules/*/src
        ${CHMOD} -R g-w ${WRKSRC}
 
 post-install:

Index: pkgsrc/databases/redis/distinfo
diff -u pkgsrc/databases/redis/distinfo:1.94 pkgsrc/databases/redis/distinfo:1.95
--- pkgsrc/databases/redis/distinfo:1.94        Tue May 26 05:39:34 2026
+++ pkgsrc/databases/redis/distinfo     Thu Aug 20 07:52:06 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.94 2026/05/26 05:39:34 adam Exp $
+$NetBSD: distinfo,v 1.95 2026/08/20 07:52:06 adam Exp $
 
-BLAKE2s (redis-8.8.0.tar.gz) = 8ce636112a1b37f765d0425c32f58ead56f68533fb074a732e7a602764e2dd14
-SHA512 (redis-8.8.0.tar.gz) = 91c20fc9c0f8a80091b25343aa8a74f414237709e2bf90cd727cc8bb88f01c2f2d853c22eaa1a70907ec5c7b44d5a70358af5f9b6750453eaeab30a4e9c226fc
-Size (redis-8.8.0.tar.gz) = 4480031 bytes
+BLAKE2s (redis-8.10.1.tar.gz) = 61f0c8b91dfd6444290ce76335c953f9aae8d53b4d105656caf486f397d3830a
+SHA512 (redis-8.10.1.tar.gz) = 9212dabeb4b47a7e5ef06019a980e89013316446504d3bc97d95a536cc296fe77f654ce1fa813f2667ff7d6f21de16b0dbb8055522c02f409ba3d2ca6f6a399d
+Size (redis-8.10.1.tar.gz) = 21568866 bytes
 SHA1 (patch-redis.conf) = a16fd0c559c9fbe0237b719d92a59259ae19c41a
 SHA1 (patch-src_Makefile) = a2817ec27efc11b11e77b4ed310a7dec7e1d39d4
 SHA1 (patch-src_hyperloglog.c) = 86d138b76271cc035b9fa28b0b5c3462430cd950