diff mbox series

[meta-oe] valkey: Upgrade 9.1.2 -> 9.1.3

Message ID 20261027102918.788795-1-leon.anavi@konsulko.com
State New
Headers show
Series [meta-oe] valkey: Upgrade 9.1.2 -> 9.1.3 | expand

Commit Message

Leon Anavi Oct. 27, 2026, 10:29 a.m. UTC
Upgrade to release 9.1.3:

Security Fixes:

- GHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster
  Pub/Sub message construction that could allow an authenticated
  client to potentially execute arbitrary code by publishing an
  oversized message

Bug Fixes:

- Fix stream commands that mutate consumer-group or PEL state
  (XGROUP, XSETID, XREADGROUP, XACK, XCLAIM, XAUTOCLAIM) not
  triggering WATCH and client-side tracking invalidation

- Reject module write commands while the server is paused for
  writes, preventing a crash from module timer callbacks during
  CLIENT PAUSE WRITE or CLUSTER FAILOVER

- Fix event loop busy-spinning on virtual machines by not using raw
  TSC for the monotonic clock when the kernel clocksource is not
  tsc

- Fix a crash in ValkeyModule_HashHasStringRef on a missing or
  expired field and correct wrong return values in the hash
  stringRef module APIs

- Fix a server abort on a RESTORE payload declaring a string length
  that overflows the allocation size; such payloads are now
  rejected as bad data

- Fix ZINTER/ZINTERSTORE returning input-order-dependent scores
  when a weighted term is 0*inf; a NaN weighted score now counts as
  0, matching ZUNION

- Clear a stale primary-failure gossip flag on replicas so later
  failovers don't incorrectly skip the election delay
  (#4533)

- Correct ValkeyModule_FreeModuleUser, ValkeyModule_ACLAddLogEntry
  and ValkeyModule_ACLAddLogEntryByUserName declarations to return
  int as implemented, fixing undefined behavior on targets with
  strict call signature checks

- valkey-check-aof now recognizes RDB base files with the VALKEY
  signature instead of misreporting a valid multipart AOF as
  invalid

- Fix module commands that access undeclared keys in other slots
  reading or writing the wrong slot in cluster mode, and aborting
  in debug builds

- Reject relative expire times in SET/GETEX, RESTORE, and
  ValkeyModule_SetExpire that overflow when added to the current
  time, preventing server aborts from negative expires

- HDEL, HGETDEL, HPERSIST, and HEXPIRE no longer propagate fields
  they treat as expired, preventing replica and AOF-reload
  divergence

- Fix a server crash when loading an ACL file containing a selector
  with an unmatched parenthesis

- Fix a segfault on Alpine/musl when Lua is built as a module,
  caused by a symbol clash on an internal clock function

- COPY of a hash now includes expired-but-unreaped fields so their
  deletion is propagated and replicas stay in sync

- Restore acceptance of hexadecimal float sorted set scores (such
  as 0x10), keeping replication and AOF replay compatible with
  Valkey 9.0

- Sorted set range commands with a negative LIMIT offset now return
  an empty result instead of a spurious element on btree-encoded
  keys

- Fix listpack encoding incompatibility that caused RDB load and
  replication failures for entries of certain lengths between 9.0
  and 9.1.x

- Fix atomic slot migration not replicating evictions on the import
  target, which let replicas grow far past maxmemory

- Redact error text in server logs when hide-user-data-from-log is
  enabled, so command arguments no longer leak into logs

- Fix HSETEX and HGETEX failing to parse their arguments when the
  key is named fields

- Fix cluster config saving to avoid publishing truncated
  nodes.conf files, losing the startup lock after the first save,
  and failing every save on SMB filesystems such as Azure Files;
  the lock now lives on a separate nodes.conf.lock file

- Fix LSET on 64-bit builds silently modifying the wrong element
  for out-of-range indexes instead of returning an index out of
  range error

- Fix atomic slot migration with cluster-databases > 1 applying
  writes made during the snapshot to the wrong database on the
  target

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
---
 .../valkey/{valkey_9.1.2.bb => valkey_9.1.3.bb}                 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-extended/valkey/{valkey_9.1.2.bb => valkey_9.1.3.bb} (98%)
diff mbox series

Patch

diff --git a/meta-oe/recipes-extended/valkey/valkey_9.1.2.bb b/meta-oe/recipes-extended/valkey/valkey_9.1.3.bb
similarity index 98%
rename from meta-oe/recipes-extended/valkey/valkey_9.1.2.bb
rename to meta-oe/recipes-extended/valkey/valkey_9.1.3.bb
index 187c9a046e..40e8a9cd75 100644
--- a/meta-oe/recipes-extended/valkey/valkey_9.1.2.bb
+++ b/meta-oe/recipes-extended/valkey/valkey_9.1.3.bb
@@ -15,7 +15,7 @@  SRC_URI = "git://github.com/valkey-io/valkey.git;branch=${@oe.utils.trim_version
            file://0001-src-Do-not-reset-FINAL_LIBS.patch \
            file://GNU_SOURCE-7.patch \
            "
-SRCREV = "7f1dffedff6de73058b2c2a389422b6ecd56c8fb"
+SRCREV = "29173b67508b2de4c0f0ed551f3b47cf19fc3ca8"
 
 RPROVIDES:${PN} = "virtual-redis"