redis.changes

@@ -1,3 +1,58 @@
+-------------------------------------------------------------------
+Sun Nov  2 14:18:05 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
+
+- Updated to 8.2.3 (boo#1252996 CVE-2025-62507)
+  * https://github.com/redis/redis/releases/tag/8.2.3
+  - Security fixes
+    - (CVE-2025-62507) Bug in `XACKDEL` may lead to stack overflow
+      and potential RCE
+  - Bug fixes
+    - `HGETEX`: A missing `numfields` argument when `FIELDS` is
+      used can lead to Redis crash
+    - An overflow in `HyperLogLog` with 2GB+ entries may result in
+      a Redis crash
+    - Cuckoo filter - Division by zero in Cuckoo filter insertion
+    - Cuckoo filter - Counter overflow
+    - Bloom filter - Arbitrary memory read/write with invalid
+      filter
+    - Bloom filter - Out-of-bounds access with empty chain
+    - Top-k - Out-of-bounds access
+    - Bloom filter - Restore invalid filter [We thank AWS security
+      for responsibly disclosing the security bug]
+
+-------------------------------------------------------------------
+Sat Oct  4 13:43:20 UTC 2025 - Илья Индиго <ilya@ilya.top>
+
+- Updated to 8.2.2 (boo#1250995)
+  * https://github.com/redis/redis/releases/tag/8.2.2
+  * Fixed Lua script may lead to remote code execution (CVE-2025-49844).
+  * Fixed Lua script may lead to integer overflow (CVE-2025-46817).
+  * Fixed Lua script can be executed in the context of another user
+    (CVE-2025-46818).
+  * Fixed LUA out-of-bound read (CVE-2025-46819).
+  * Fixed potential crash on Lua script or streams and HFE defrag.
+  * Fixed potential crash when using ACL rules.
+  * Added VSIM: new EPSILON argument to specify maximum distance.
+  * Added SVS-VAMANA: allow use of BUILD_INTEL_SVS_OPT flag.
+  * Added RESP3 serialization performance.
+  * Added INFO SEARCH: new SVS-VAMANA metrics.
+
+-------------------------------------------------------------------
+Mon Aug 18 17:07:31 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
+
+- Updated to 8.2.1
+  * https://github.com/redis/redis/releases/tag/8.2.1
+  - Bug fixes
+    * #14240 INFO KEYSIZES - potential incorrect histogram updates
+      on cluster mode with modules
+    * #14274 Disable Active Defrag during flushing replica
+    * #14276 XADD or XTRIM can crash the server after loading RDB
+    * #Q6601 Potential crash when running FLUSHDB (MOD-10681)
+  * Performance and resource utilization
+    * Query Engine - LeanVec and LVQ proprietary Intel
+      optimizations were removed from Redis Open Source
+    * #Q6621 Fix regression in INFO (MOD-10779)
+
 -------------------------------------------------------------------
 Mon Aug  4 11:22:27 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
 

redis.hashes

@@ -198,3 +198,14 @@ hash redis-7.2.10.tar.gz sha256 e576ad54bc53770649c556933ecd555b975e3dac422e4635
 hash redis-7.4.5.tar.gz sha256 00bb280528f5d7934bec8ab309b8125088c209131e10609cb1563b91365633bb http://download.redis.io/releases/redis-7.4.5.tar.gz
 hash redis-8.0.3.tar.gz sha256 33f37290b00b14e9a884dd4dcba335febd63ea16c51609d34fa41e031ad587df http://download.redis.io/releases/redis-8.0.3.tar.gz
 hash redis-8.2.0.tar.gz sha256 ff95b83b7cf2f7a33af3be1e52fdf2e791c259f8272465c3b09f9e6bc901b604 http://download.redis.io/releases/redis-8.2.0.tar.gz
+hash redis-8.2.1.tar.gz sha256 e2c1cb9dd4180a35b943b85dfc7dcdd42566cdbceca37d0d0b14c21731582d3e http://download.redis.io/releases/redis-8.2.1.tar.gz
+hash redis-6.2.20.tar.gz sha256 7f8b8a7aed53c445a877adf9e3743cdd323518524170135a58c0702f2dba6ef4 http://download.redis.io/releases/redis-6.2.20.tar.gz
+hash redis-7.2.11.tar.gz sha256 2f9886eca68d30114ad6a01da65631f8007d802fd3e6c9fac711251e6390323d http://download.redis.io/releases/redis-7.2.11.tar.gz
+hash redis-7.4.6.tar.gz sha256 73b94484e00fb4c2440b490dc4021142fb0b6efc8b64c6329c10d24f0b531c99 http://download.redis.io/releases/redis-7.4.6.tar.gz
+hash redis-8.0.4.tar.gz sha256 7e185265d455ea8deb6bb7e071352ea691ca4d7b5105fc172fa524af59917b89 http://download.redis.io/releases/redis-8.0.4.tar.gz
+hash redis-8.2.2.tar.gz sha256 4e340e8e822a82114b6fb0f7ca581b749fa876e31e36e9fbcb75416bec9d0608 http://download.redis.io/releases/redis-8.2.2.tar.gz
+hash redis-6.2.21.tar.gz sha256 6383b32ba8d246f41bbbb83663381f5a5f4c4713235433cec22fc4a47e9b6d5f http://download.redis.io/releases/redis-6.2.21.tar.gz
+hash redis-7.2.12.tar.gz sha256 97c60478a7c777ac914ca9d87a7e88ba265926456107e758c62d8f971d0196bc http://download.redis.io/releases/redis-7.2.12.tar.gz
+hash redis-7.4.7.tar.gz sha256 c97e57b0df330a9e091cacff012bebe763c275398cf36ff44cdba876814b595b http://download.redis.io/releases/redis-7.4.7.tar.gz
+hash redis-8.0.5.tar.gz sha256 012bca956fc7151abc2281950e69768ee9c53ce4b36588772041675bc95fd313 http://download.redis.io/releases/redis-8.0.5.tar.gz
+hash redis-8.2.3.tar.gz sha256 d88f2361fdf3a3a8668fe5753e29915566109dca07b4cb036427ea6dc7783671 http://download.redis.io/releases/redis-8.2.3.tar.gz

redis.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package redis
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -20,7 +20,7 @@
 %define _log_dir        %{_localstatedir}/log/%{name}
 %define _conf_dir       %{_sysconfdir}/%{name}
 Name:           redis
-Version:        8.2.0
+Version:        8.2.3
 Release:        0
 Summary:        Persistent key-value database
 License:        AGPL-3.0-only