[pkgsrc/trunk]: pkgsrc/databases/redis redis: updated to 6.2.5

[adam <adam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/5c5dbc76d566
branches:  trunk
changeset: 456214:5c5dbc76d566
user:      adam <adam%pkgsrc.org@localhost>
date:      Thu Jul 22 09:56:54 2021 +0000

description:
redis: updated to 6.2.5

Redis 6.2.5
==========

Upgrade urgency: SECURITY, contains fixes to security issues that affect
authenticated client connections on 32-bit versions. MODERATE otherwise.

Fix integer overflow in BITFIELD on 32-bit versions (CVE-2021-32761).
An integer overflow bug in Redis version 2.2 or newer can be exploited using the
BITFIELD command to corrupt the heap and potentially result with remote code
execution.

Bug fixes that involve behavior changes:
* Change reply type for ZPOPMAX/MIN with count in RESP3 to nested array.
  Was using a flat array like in RESP2 instead of a nested array like ZRANGE does.
* Fix reply type for HRANDFIELD and ZRANDMEMBER when key is missing.
  Was using a null array instead of an empty array.
* Fix reply type for ZRANGESTORE when source key is missing.
  Was using an empty array like ZRANGE instead of 0 (used in the STORE variant).

Bug fixes that are only applicable to previous releases of Redis 6.2:
* ZRANDMEMBER WITHSCORES with negative COUNT may return bad score
* Fix crash after CLIENT UNPAUSE when threaded I/O config is enabled
* Fix XTRIM or XADD with LIMIT may delete more entries than the limit
* Fix build issue with OpenSSL 1.1.0

Other bug fixes:
* Fail EXEC command in case a watched key is expired
* Fix SMOVE not to invalidate dest key (WATCH and tracking) when member already exists
* Fix SINTERSTORE not to delete dest key when getting a wrong type error
* Fix overflows on 32-bit versions in GETBIT, SETBIT, BITCOUNT, BITPOS, and BITFIELD
* Improve MEMORY USAGE on stream keys
* Set TCP keepalive on inbound cluster bus connections
* Fix diskless replica loading to recover from RDB short read on module AUX data
* Fix race in client side tracking
* Fix ziplist length updates on big-endian platforms

CLI tools:
* redis-cli cluster import command may issue wrong MIGRATE command, sending COPY instead of REPLACE
* redis-cli --rdb fixes when using "-" to write to stdout
* redis-cli support for RESP3 set type in CSV and RAW output

Modules:
* Module API for getting current command name
* Fix RM_StringTruncate when newlen is 0
* Fix CLIENT UNBLOCK crashing modules without timeout callback

diffstat:

 databases/redis/Makefile |   4 ++--
 databases/redis/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (30 lines):

diff -r 1e1144878ef6 -r 5c5dbc76d566 databases/redis/Makefile
--- a/databases/redis/Makefile  Thu Jul 22 09:54:17 2021 +0000
+++ b/databases/redis/Makefile  Thu Jul 22 09:56:54 2021 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.70 2021/06/02 10:25:02 adam Exp $
+# $NetBSD: Makefile,v 1.71 2021/07/22 09:56:54 adam Exp $
 
-DISTNAME=      redis-6.2.4
+DISTNAME=      redis-6.2.5
 CATEGORIES=    databases
 MASTER_SITES=  http://download.redis.io/releases/
 
diff -r 1e1144878ef6 -r 5c5dbc76d566 databases/redis/distinfo
--- a/databases/redis/distinfo  Thu Jul 22 09:54:17 2021 +0000
+++ b/databases/redis/distinfo  Thu Jul 22 09:56:54 2021 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.61 2021/06/02 10:25:02 adam Exp $
+$NetBSD: distinfo,v 1.62 2021/07/22 09:56:54 adam Exp $
 
-SHA1 (redis-6.2.4.tar.gz) = 3b313cfa5c2ef16d70aa30eb01e1b197710cbcf9
-RMD160 (redis-6.2.4.tar.gz) = 3d006a635c89ad9a21ae49b352ce248775aab0b7
-SHA512 (redis-6.2.4.tar.gz) = 22db5b64de20a4823fd219b559c05f329e37fc86ce32099c64655dc50e60228706c99bffeae8d7080d8689910879318ec6621388bde23bf1486aefb881f33cb0
-Size (redis-6.2.4.tar.gz) = 2457940 bytes
+SHA1 (redis-6.2.5.tar.gz) = b675f5e883f095c2081f605e3ca31a6d5832383c
+RMD160 (redis-6.2.5.tar.gz) = 1c0d20f2c57d2cb0918e58b36a584ecaa3d8d9b0
+SHA512 (redis-6.2.5.tar.gz) = 8c54451032cbb627ec2827251556cba2010e56544baca7ea117b5afd2c2add484acbedd3baf21bdb8fd10672602cf52294a4e26b135c1406d7a723c048275e3a
+Size (redis-6.2.5.tar.gz) = 2465302 bytes
 SHA1 (patch-redis.conf) = ee657a9d82711263ceb0fb8f7d8059ed23528fe9
 SHA1 (patch-src_Makefile) = b74e1575d423b9a4d09b6b5e3eeb355d79c27855
 SHA1 (patch-src_hyperloglog.c) = e9bdd3c630024a6fbe02c2c1d85e26131ad938cf