pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/databases/redis redis: update to 6.2.7.



details:   https://anonhg.NetBSD.org/pkgsrc/rev/52447532b3aa
branches:  trunk
changeset: 379225:52447532b3aa
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Fri May 13 11:24:27 2022 +0000

description:
redis: update to 6.2.7.

================================================================================
Redis 6.2.7 Released Wed Apr 27 12:00:00 IDT 2022
================================================================================

Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:
* (CVE-2022-24736) An attacker attempting to load a specially crafted Lua script
  can cause NULL pointer dereference which will result with a crash of the
  redis-server process. This issue affects all versions of Redis.
  [reported by Aviv Yahav].
* (CVE-2022-24735) By exploiting weaknesses in the Lua script execution
  environment, an attacker with access to Redis can inject Lua code that will
  execute with the (potentially higher) privileges of another Redis user.
  [reported by Aviv Yahav].


Potentially Breaking Fixes
==========================

* LPOP/RPOP with count against non-existing list return null array (#10095)
* LPOP/RPOP used to produce wrong replies when count is 0 (#9692)


Performance and resource utilization improvements
=================================================

* Speed optimization in command execution pipeline (#10502)
* Fix regression in Z[REV]RANGE commands (by-rank) introduced in Redis 6.2 (#10337)


Platform / toolchain support related improvements
=================================================

* Fix RSS metrics on NetBSD and OpenBSD (#10116, #10149)
* Fix OpenSSL 3.0.x related issues (#10291)


Bug Fixes
=========

* Lua: Add checks for min-slave-* configs when evaluating Lua scripts (#10160)
* Lua: fix crash on a script call with many arguments, a regression in v6.2.6 (#9809)
* Tracking: Make invalidation messages always after command's reply (#9422)
* Fix excessive stream trimming due to an overflow (#10068)
* Add missed error counting for INFO errorstats (#9646)
* Fix geo search bounding box check causing missing results (#10018)
* Improve EXPIRE TTL overflow detection (#9839)
* Modules: Fix thread safety violation when a module thread adds an error reply, broken in 6.2 (#10278)
* Modules: Fix missing and duplicate error stats (#10278)
* Module APIs: release clients blocked on module commands in cluster resharding
  and down state (#9483)
* Sentinel: Fix memory leak with TLS (#9753)
* Sentinel: Fix issues with hostname support (#10146)
* Sentinel: Fix election failures on certain container environments (#10197)

diffstat:

 databases/redis/Makefile |  4 ++--
 databases/redis/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (28 lines):

diff -r a8e3bee3771c -r 52447532b3aa databases/redis/Makefile
--- a/databases/redis/Makefile  Fri May 13 10:57:41 2022 +0000
+++ b/databases/redis/Makefile  Fri May 13 11:24:27 2022 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.72 2021/10/04 18:55:36 adam Exp $
+# $NetBSD: Makefile,v 1.73 2022/05/13 11:24:27 wiz Exp $
 
-DISTNAME=      redis-6.2.6
+DISTNAME=      redis-6.2.7
 CATEGORIES=    databases
 MASTER_SITES=  http://download.redis.io/releases/
 
diff -r a8e3bee3771c -r 52447532b3aa databases/redis/distinfo
--- a/databases/redis/distinfo  Fri May 13 10:57:41 2022 +0000
+++ b/databases/redis/distinfo  Fri May 13 11:24:27 2022 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.65 2021/10/26 10:09:55 nia Exp $
+$NetBSD: distinfo,v 1.66 2022/05/13 11:24:27 wiz Exp $
 
-BLAKE2s (redis-6.2.6.tar.gz) = b86de3ec07ea4ad62d78a65e28fb7dfc76102a9d88b0af0acbe9d3ccac9c7792
-SHA512 (redis-6.2.6.tar.gz) = 9b947d26fd9e208627ed22d318ab3d0775ab0be46d98db1c1d158feac671b984e75ce33e647d196face9643f80768af47e678be1b4e1ddd3eb56dff467c46022
-Size (redis-6.2.6.tar.gz) = 2476542 bytes
+BLAKE2s (redis-6.2.7.tar.gz) = 07fed6643f55bce72e5b2ca80d6f0aeaad287c1cca56db9a065d941de7563310
+SHA512 (redis-6.2.7.tar.gz) = d113094b8e31754915db7f0317d9b7969e034af3a7bac2ae0cbfad6cc61ba3aae35e9709c435abc1024a96f914df7a760b3cd18d06c375b541cfa837d1c5b953
+Size (redis-6.2.7.tar.gz) = 2487287 bytes
 SHA1 (patch-redis.conf) = ee657a9d82711263ceb0fb8f7d8059ed23528fe9
 SHA1 (patch-src_Makefile) = 0b6f68bbb2cbf9aad655611bdd9aee8f3ed4e850
 SHA1 (patch-src_hyperloglog.c) = e9bdd3c630024a6fbe02c2c1d85e26131ad938cf



Home | Main Index | Thread Index | Old Index