CVS commit: [pkgsrc-2026Q1] pkgsrc/databases/redis

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Mon May 18 07:55:48 UTC 2026

Modified Files:
        pkgsrc/databases/redis [pkgsrc-2026Q1]: Makefile distinfo

Log Message:
Pullup ticket #7116 - requested by taca
databases/redis: security fix

Revisions pulled up:
- databases/redis/Makefile                                      1.103
- databases/redis/distinfo                                      1.93

---
   Module Name: pkgsrc
   Committed By:        adam
   Date:                Mon May 11 15:55:42 UTC 2026

   Modified Files:
        pkgsrc/databases/redis: Makefile distinfo

   Log Message:
   redis: updated to 8.6.3

   Redis 8.6.3    Released Tue 5 May 2026 16:00:00 IST

   Update urgency: `SECURITY`: There are security fixes in the release.

   Security fixes

   - (CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution.
   - (CVE-2026-25243) Invalid memory access in `RESTORE` may lead to Remote Code Execution
   - (CVE-2026-23631) Lua Use-After-Free may lead to remote code execution
   - (CVE-2026-25588) Invalid memory access in `RESTORE` may lead to Remote Code Execution (Time Series)
   - (CVE-2026-25589) Invalid memory access in `RESTORE` may lead to Remote Code Execution (Probabilistic)

   Bug fixes

   - `SUBSCRIBE`, `PSUBSCRIBE`, `SSUBSCRIBE`: crash on OOM (RED-167788)
   - `CONFIG SET`: some settings allow invalid characters (RED-167787)
   - `SCRIPT DEBUG`: potential crash on scripts (RED-175507)
   - `VADD`: crash or buffer overflow on large `REDUCE` value (RED-170921)
   - `VSET`: crash on huge allocations (MOD-12678)
   - Potential crash on disconnections and TLS failures (Time Series) (MOD-14850)
   - Q8745 Crash when many keys receive expirations under heavy TTL activity (MOD-14500)
   - Q8848 HNSW vector index memory growth under high-churn workloads until shard restart (MOD-13761)
   - Q8205, Q8259 `FT.HYBRID` `VSIM RANGE` + `FILTER` incorrectly returns zero results (MOD-12370, MOD-13884)
   - Q9182 `FT.PROFILE HYBRID` returns an empty reply (MOD-14778)
   - Q8129, Q8140 `FT.PROFILE` reports an incorrect shard total profile time (MOD-13735, MOD-13181)
   - Q9047 `FT.PROFILE` output is inconsistent when a profiled value is missing (MOD-10560)
   - Q8791 `FT.EXPLAIN` does not lock, causing a race with concurrent index changes (MOD-14461)
   - Q8382 Crash when indexing negative zero (-0.0) (MOD-13904)
   - Q8590 `FILTER` returns inconsistent results with multiple indexes sharing field aliases (MOD-14063)
   - Q8660 `FILTER` behavior depends on property order in the expression (MOD-14065)
   - Q8593 Filter expressions are evaluated for indexes that do not match the document type (MOD-14064)
   - Q8591 Documents are inconsistently included or excluded depending on the indexing path taken (MOD-13948)
   - Q8589 `RENAME` notification handler loads the wrong key, causing stale index entries after a rename (MOD-14328)
   - Q9012 `PERSIST` and `HPERSIST` notifications are not reflected in index expiration tracking (MOD-14800)
   - Q9079 `FT.SPELLCHECK` treats `PARAMS` placeholders as literal terms instead of resolving them (MOD-10596)
   - Q8462 GC out-of-memory on replica shards leaves the replica in an inconsistent state (MOD-14066)
   - Q9066 Race condition in `FT.HYBRID` causes intermittent failures under concurrent hybrid query load (MOD-14732)
   - Q8109, Q8149 Configuration registration omits module parameters, causing them to be unexposed or misapplied (RED-171841)
   - Q9163 Crash on `FT.SEARCH` when topology validation fails (for example, some nodes unreachable) (MOD-14475)
   - Q8395 `FT.SEARCH` fails with "Query requires unavailable slots" after shard restart or failover (MOD-13828)
   - Q8451 `FT.INFO`-style output no longer reports zero-index summary data when no indices exist (MOD-14079)
   - Q9078 `FT.CREATE` now rejects schema definitions with invalid option combinations at creation time (MOD-14655)
   - Q8051, Q8114 Crash diagnostics now include the `IndexSpec` of the index the failing thread was working on (MOD-7574)

   Metrics

   - Q8210, Q8231 `FT.PROFILE`: added queue time tracking (MOD-13602)


To generate a diff of this commit:
cvs rdiff -u -r1.101.2.1 -r1.101.2.2 pkgsrc/databases/redis/Makefile
cvs rdiff -u -r1.91.2.1 -r1.91.2.2 pkgsrc/databases/redis/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/databases/redis/Makefile
diff -u pkgsrc/databases/redis/Makefile:1.101.2.1 pkgsrc/databases/redis/Makefile:1.101.2.2
--- pkgsrc/databases/redis/Makefile:1.101.2.1   Thu May  7 18:45:09 2026
+++ pkgsrc/databases/redis/Makefile     Mon May 18 07:55:48 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.101.2.1 2026/05/07 18:45:09 maya Exp $
+# $NetBSD: Makefile,v 1.101.2.2 2026/05/18 07:55:48 bsiegert Exp $
 
-DISTNAME=      redis-8.6.2
+DISTNAME=      redis-8.6.3
 CATEGORIES=    databases
 MASTER_SITES=  http://download.redis.io/releases/
 

Index: pkgsrc/databases/redis/distinfo
diff -u pkgsrc/databases/redis/distinfo:1.91.2.1 pkgsrc/databases/redis/distinfo:1.91.2.2
--- pkgsrc/databases/redis/distinfo:1.91.2.1    Thu May  7 18:45:09 2026
+++ pkgsrc/databases/redis/distinfo     Mon May 18 07:55:48 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.91.2.1 2026/05/07 18:45:09 maya Exp $
+$NetBSD: distinfo,v 1.91.2.2 2026/05/18 07:55:48 bsiegert Exp $
 
-BLAKE2s (redis-8.6.2.tar.gz) = 339303b85ebd88424108f30df32b64d08b53d76184289c0d3b2739cf267bd01d
-SHA512 (redis-8.6.2.tar.gz) = 8070b841ed10663a007796c2c480d6972333bbc398d1e02f34ca49293e9731b2f24c3b609b4a90fa8bf24302a5e0466711752ed80e62bb772636d39f8e3704d1
-Size (redis-8.6.2.tar.gz) = 4245565 bytes
+BLAKE2s (redis-8.6.3.tar.gz) = 7a9141d1cc012da02699cf4a5585ffbb93aaedb00c10dc483aab4060523a9e9b
+SHA512 (redis-8.6.3.tar.gz) = 2f7e339427d6ac47d4d5c601ccb36c27a44474549fdf33fe5c0acb275f7b03822a4bd5c9bdf7b5f85c6089d201ac2a182a205c756103595540c67a27f2d8899c
+Size (redis-8.6.3.tar.gz) = 4252312 bytes
 SHA1 (patch-redis.conf) = a16fd0c559c9fbe0237b719d92a59259ae19c41a
 SHA1 (patch-src_Makefile) = a2817ec27efc11b11e77b4ed310a7dec7e1d39d4
 SHA1 (patch-src_hyperloglog.c) = 86d138b76271cc035b9fa28b0b5c3462430cd950