Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package valkey for openSUSE:Factory checked in at 2026-07-26 11:28:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/valkey (Old) and /work/SRC/openSUSE:Factory/.valkey.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "valkey" Sun Jul 26 11:28:06 2026 rev:22 rq:1367611 version:9.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/valkey/valkey.changes 2026-05-20 15:24:12.033346892 +0200 +++ /work/SRC/openSUSE:Factory/.valkey.new.2004/valkey.changes 2026-07-26 11:30:11.466247297 +0200 @@ -1,0 +2,236 @@ +Wed Jul 22 09:02:50 UTC 2026 - Marcus Rueckert <[email protected]> + +- Update to 9.1.1 + Upgrade urgency SECURITY: This release includes security fixes we + recommend you apply as soon as possible. + + Security Fixes + - CVE-2026-56684: Fix a use-after-free in TLS connection handling + that could allow an authenticated client to achieve remote code + execution using CLIENT KILL (#4234) (boo#1272443) + - CVE-2026-63639: Reject corrupt stream RDB files containing a + shared NACK across consumers, which could allow remote code + execution. Reported by @z0v3r1n and @lifip. (#4073) (boo#1272442) + Bug Fixes + - Omit the implicit alldbs ACL rule from ACL LIST, ACL SAVE and + CONFIG REWRITE so older versions can parse the output by + @dvkashapov (#3964) + - Improve throughput when IO threads are enabled by offloading + object deallocation from the main thread by @roshkhatri (#3938) + - Fix use-after-free crash when ACL LOAD removes a user whose + authenticated client has its close deferred by @ranshid (#3800) + - Enforce db= ACL permissions on every DB clause of COPY, closing + a bypass with REPLACE or repeated DB tokens by @enjoy-binbin + (#3801) + - Enforce database-level ACLs for CLUSTER FLUSHSLOT, which + removes keys from all databases by @enjoy-binbin (#3806) + - Fix use-after-free in the module API when unregistering the + first registered cluster message receiver by @eifrah-aws + (#3846) + - Fix HRANDFIELD with a positive count looping forever when + non-expired fields are fewer than the requested count by + @cjx-zar (#4047) + - Fix clients left on the wrong database after module keyspace + notifications for MOVE and COPY by @enjoy-binbin (#4024) + - Fix Sentinel crash during coordinated failover when the command + link to the old primary disconnects by @lukepalmer (#4068) + - Fix crash when active hash field expiration leaves a + single-entry expiry bucket whose last field is later removed by + @ranshid (#3950) + - Fix assertion in HEXPIRE, HGETDEL and HPERSIST when a module + blocks the client in a keyspace notification callback by + @enjoy-binbin (#3743) + - Fix undefined behavior in the failover delay calculation when + cluster-node-timeout is below 30 milliseconds by @enjoy-binbin + (#3941) + - Reject zipmap RESTORE/RDB payloads with overflowing length + fields that could cause out-of-bounds access on 32-bit builds + by @madolson (#3920) + - Reject NAN scores in listpack and ziplist encoded sorted sets + on RDB/RESTORE load, preventing a crash on skiplist conversion + by @madolson (#3921) + - Fix corrupted replies (dropped leading bytes) caused by a reply + buffer race when IO threads are enabled by @nanyan0312 (#4060) + - Fix startup crash on 32-bit systems where time_t is 64-bit + (such as Alpine 3.23) when generating INFO output by + @chenshi5012 (#3787) + - HGETDEL now returns a syntax error when the FIELDS keyword is + missing or misplaced by @lcxn123 (#4049) + - COMMAND INFO in RESP3 now returns the subcommands field as an + array instead of a set for commands without subcommands by + @rickrams (#3939) + - Send the replica version on the dual-channel RDB connection so + full syncs with newer encodings like hash field TTLs succeed by + @hpatro (#4105) + - Fix duplicate failure handling and an invalid reply sequence in + cluster slot migration by @chx9 (#3723) + - Reject control characters in SENTINEL SET values to prevent + config-file injection via Sentinel config rewrite by + @eifrah-aws (#3847) + - Reject control characters and delimiters in cluster AUX fields + and validate cluster-announce-ip to prevent nodes.conf + injection by @eifrah-aws (#3848) + - Redact key names and user data from more server log messages + when hide-user-data-from-log is enabled by @zackcam (#3872) + - ACL LOG now reports the denied database ID for COPY instead of + the command name when db= access is denied by @enjoy-binbin + (#3888) + - Fix garbled shard IDs in the cluster UPDATE message log line by + @enjoy-binbin (#3942) + - Fix negative master_sync_total_bytes in INFO replication during + disk-based sync when the RDB exceeds 2GB by @chx9 (#3811) + - Increase the maximum process title length from 255 to 1024 + characters to avoid truncation with long paths by @pkhartsk + (#3843) + +------------------------------------------------------------------- +Tue May 19 21:35:29 UTC 2026 - Marcus Rueckert <[email protected]> + +- Update to 9.1.0 + - Behavior Changes + - Revert strict TLS certificate validation at config load as it + is a breaking change, deferred to next major version (#3572) + - New Features and enhanced behavior + - Add cluster bus network traffic usage metric in bytes by + @hpatro (#3396) + - Reduce latency spikes during rehashing via incremental page + release by @chzhoo (#3481) + - Do the failover immediately if the replica is the best ranked + replica by @enjoy-binbin (#2227) + - Add cluster-config-save-behavior option to control nodes.conf + save behavior by @enjoy-binbin (#3372) + - Lua scripting engine is now statically linked by default + instead of dynamically linked by @eifrah-aws (#3392) + - Module command result callback addition by @martinrvisser + (#2936) + - Database-level access control by @dvkashapov (#2309) + - Move Lua scripting engine into a Valkey module by @rjd15372 + (#2858) + - Support cross node consistency for SCAN commands through + configurable DB hash seed by @sarthakaggarwal97 (#2608) + - Support automatic TLS reload by @yang-z-o (#3020) + - Support TLS authentication using SAN URI by @yang-z-o (#3078) + - Prevent invalid TLS certificates from being loaded by + @yang-z-o (#2999) + - Failing to save the cluster config file will no longer exit + the process by @enjoy-binbin (#1032) + - Command and API updates + - Makes CLUSTER KEYSLOT available in standalone mode by + @stockholmux (#3040) + - Update HSETEX so that it always issue keyspace notifications + after validation by @ranshid (#3001) + - Adds HGETDEL command by @roshkhatri (#2851) + - Support NX/XX flag in HSETEX command by @hanxizh9910 (#2668) + - New CLUSTERSCAN command for cluster-wide key scanning across + nodes by @nmvk (#2934) + - New MSETEX command to set multiple keys with a shared + expiration by @enjoy-binbin (#3121) + - CLUSTER SHARDS/CLUSTER SLOTS now include an availability-zone + field by @bandalgomsu (#3156) + - Performance and Efficiency improvements + - Redesign IO threading communication model with lock-free + queues (8-17% throughput gain) by @akashkgit (#3324) + - Increase embedded string threshold from 64 to 128 bytes (30% + GET throughput gain) by @Nikhil-Manglore (#3397) + - ARM NEON SIMD optimization for pvFind() in vset.c (2-3x + speedup) by @ahmadbelb (#3033) + - Optimize WATCH duplicate key check from O(N) to O(1) using + per-db hashtable by @enjoy-binbin (#3360) + - Optimize CLUSTERSCAN MATCH so that it uses a specific slot if + given by @nmvk (#3380) + - Improve COB memory tracking with copy avoidance by + @dvkashapov (#3306) + - Optimize zset memory usage by embedding element in skiplist + by @chzhoo (#2508) + - Remove internal server object pointer overhead in small + strings by @rainsupreme (#2516) + - Optimize skiplist query efficiency by embedding the skiplist + header by @chzhoo (#2867) + - Improve performance during rehashing by @chzhoo (#3073) + - Optimize SREM/ZREM/HDEL to pause auto shrink when deleting + multiple items by @enjoy-binbin (#3144) + - Abort and swap the tables if ht1 is very full during the + hashtable shrink rehashing by @enjoy-binbin (#3175) + - Improve performance of copy avoidance when command reply + tracking is disabled by @dvkashapov (#3086) + - Enable hardware clock by default by @dvkashapov (#3103) + - Improve COMMAND performance by caching responses by @ebarskiy + (#2839) + - Add support for asynchronous freeing of keys on writable + replicas by @Scut-Corgis (#2849) + - Faster XRANGE/XREVRANGE via stream range hot-path + optimization by @nesty92 (#3002) + - Replicas can reuse the RDB file as AOF preamble after + disk-based full sync by @RayaCoo (#1901) + - Module API changes + - Add ValkeyModule_ClusterKeySlotC by @bandalgomsu (#2984) + - Add more client info flags to module API by @martinrvisser + (#2868) + - Add prefix-aware ACL permission checks and new module API by + @eifrah-aws (#2796) + - Support unsigned 64-bit numeric config values in module API + by @artikell (#1546) + - Observability and logging + - Cumulative metrics for active I/O threads usage by @deepakrn + (#2463) + - Cumulative metric for active main thread usage by @dvkashapov + (#2931) + - Support whole cluster info for INFO command in cluster_info + section by @soloestoy, @ranshid (#2876, #2964) + - Add remaining_repl_size field in CLUSTER GETSLOTMIGRATIONS + output by @enjoy-binbin (#3135) + - Add logging helper function to print node's ip:port when + nodename not explicitly set by @zhijun42 (#2777) + - Dual-channel-replication announces itself at + replica-announce-ip if configured by @jdheyburn (#2846) + - Show replica dual-channel replication buffer memory in INFO + MEMORY and MEMORY STATS by @enjoy-binbin (#2924) + - Add rdb_transmitted state to replica state in INFO by + @enjoy-binbin (#2833) + - New INFO section for scripting engines by @rjd15372 (#2738) + - Adding json support for log-format config by @jbergstroem + (#1791) + - Add server side TLS certificate expiry tracking and INFO + telemetry by @YiwenZhang12 (#2913) + - Add option to use libbacktrace for backtraces in crash + reports by @rainsupreme (#3034) + - Build and Tooling + - Show RPS histogram in valkey-benchmark by @hanxizh9910 + (#2471) + - Add --warmup and --duration parameters to valkey-benchmark by + @rainsupreme (#2581) + - Lazy loading of RDMA libs in CLI/Benchmark when building as + module by @Ada-Church-Closure (#3072) + - Add support for atomic slot migration to valkey-cli by + @murphyjacob4 (#2755) + - Replace C++ fast_float dependency with pure C implementation + (ffc) by @lemire (#3329) + - Bug Fixes + - Fix(syncio): Set errno on EOF in syncRead and propagate to + conn->last by @abmathur-ie (#3580) + - Fix GEOSEARCH BYPOLYGON leak on invalid COUNT by @bandalgomsu + (#3568) + - Handle NULL pointer in streamTrim listpack delta calculation + by @smkher (#3591) + - Fixes server crash when RDMA benchmark clients disconnect by + @quanyeyang (#3448) + - Fix the memory leak in valkey-benchmark by @nmvk (#3643) + - Fix valkey-cli --cluster del-node for unreachable nodes by + @yang-z-o (#3209) + - Enhance cluster stale packet detection to prevent sub-replica + and empty primary by @zhijun42 (#2811) + - Big endian bitmap byte order mismatch fix by @nmvk (#3401) + - Fix slot-migration-max-failover-repl-bytes unable to accept + -1 by @enjoy-binbin (#3443) + - Fix config rewrite producing negative values for unsigned + memory configs by @enjoy-binbin (#3440) + - Fix HPERSIST RESP protocol violation on wrong-type key by + @madolson (#3516) + - Fix lua-enable-insecure-api default value cannot be changed + to yes by @enjoy-binbin (#3548) + - Strictly check CRLF when parsing querybuf by @enjoy-binbin + #2872) +- Drop fix-pointer-to-int.patch +- Refresh valkey-conf.patch + +------------------------------------------------------------------- Old: ---- fix-pointer-to-int.patch valkey-9.0.4.tar.gz New: ---- valkey-9.1.1.tar.gz ----------(Old B)---------- Old: #2872) - Drop fix-pointer-to-int.patch - Refresh valkey-conf.patch ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ valkey.spec ++++++ --- /var/tmp/diff_new_pack.Z4KN7q/_old 2026-07-26 11:30:12.366278375 +0200 +++ /var/tmp/diff_new_pack.Z4KN7q/_new 2026-07-26 11:30:12.370278513 +0200 @@ -26,7 +26,7 @@ %global make_flags CFLAGS="%{build_cflags}" DEBUG="" V="echo" PREFIX=%{buildroot}%{_prefix} USE_SYSTEMD=yes BUILD_TLS=yes BUILD_RDMA=yes Name: valkey -Version: 9.0.4 +Version: 9.1.1 Release: 0 Summary: Persistent key-value database License: BSD-3-Clause @@ -43,8 +43,6 @@ Source9: %{name}-user.conf Source10: macros.%{name} Source11: migrate_redis_to_valkey.bash -# PATCH-FIX-UPSTREAM fix-pointer-to-int.patch -- Fix pointer-to-int-cast build errors for i586 and armv7l -Patch0: fix-pointer-to-int.patch # PATCH-FIX-OPENSUSE -- Adjust configs for openSUSE Patch1001: %{name}-conf.patch BuildRequires: jemalloc-devel ++++++ valkey-9.0.4.tar.gz -> valkey-9.1.1.tar.gz ++++++ ++++ 124548 lines of diff (skipped) ++++++ valkey-conf.patch ++++++ --- /var/tmp/diff_new_pack.Z4KN7q/_old 2026-07-26 11:30:14.110338312 +0200 +++ /var/tmp/diff_new_pack.Z4KN7q/_new 2026-07-26 11:30:14.118338587 +0200 @@ -1,7 +1,7 @@ -Index: valkey-9.0.4/sentinel.conf +Index: valkey-9.1.0/sentinel.conf =================================================================== ---- valkey-9.0.4.orig/sentinel.conf -+++ valkey-9.0.4/sentinel.conf +--- valkey-9.1.0.orig/sentinel.conf ++++ valkey-9.1.0/sentinel.conf @@ -7,17 +7,18 @@ protected-mode no # port <sentinel-port> @@ -83,11 +83,11 @@ -SENTINEL primary-reboot-down-after-period mymaster 0 +# SENTINEL primary-reboot-down-after-period mymaster 0 -Index: valkey-9.0.4/valkey.conf +Index: valkey-9.1.0/valkey.conf =================================================================== ---- valkey-9.0.4.orig/valkey.conf -+++ valkey-9.0.4/valkey.conf -@@ -395,7 +395,7 @@ daemonize no +--- valkey-9.1.0.orig/valkey.conf ++++ valkey-9.1.0/valkey.conf +@@ -411,7 +411,7 @@ daemonize no # The default is "no". To run under upstart/systemd, you can simply uncomment # the line below: # @@ -96,7 +96,7 @@ # If a pid file is specified, the server writes it where specified at startup # and removes it at exit. -@@ -409,7 +409,7 @@ daemonize no +@@ -425,7 +425,7 @@ daemonize no # # Note that on modern Linux systems "/run/valkey.pid" is more conforming # and should be used instead. @@ -105,7 +105,7 @@ # Specify the server verbosity level. # This can be one of: -@@ -440,7 +440,8 @@ loglevel notice +@@ -457,7 +457,8 @@ loglevel notice # Specify the log file name. Also the empty string can be used to force # the server to log on the standard output. Note that if you use standard # output for logging but daemonize, logs will be sent to /dev/null @@ -115,7 +115,7 @@ # To enable logging to the system logger, just set 'syslog-enabled' to yes, # and optionally update the other syslog parameters to suit your needs. -@@ -631,7 +632,7 @@ rdb-del-sync-files no +@@ -661,7 +662,7 @@ rdb-del-sync-files no # Note that modifying 'dir' during runtime may have unexpected behavior, # for example when a child process is running, related file operations may # have unexpected effects. @@ -124,10 +124,10 @@ ################################# REPLICATION ################################# -Index: valkey-9.0.4/valkey.default.conf +Index: valkey-9.1.0/valkey.default.conf =================================================================== --- /dev/null -+++ valkey-9.0.4/valkey.default.conf ++++ valkey-9.1.0/valkey.default.conf @@ -0,0 +1,7 @@ +include /etc/valkey/includes/valkey.defaults.conf + @@ -136,10 +136,10 @@ +pidfile /run/valkey/default.pid +logfile /var/log/valkey/default.log + -Index: valkey-9.0.4/sentinel.default.conf +Index: valkey-9.1.0/sentinel.default.conf =================================================================== --- /dev/null -+++ valkey-9.0.4/sentinel.default.conf ++++ valkey-9.1.0/sentinel.default.conf @@ -0,0 +1,9 @@ +include /etc/valkey/includes/sentinel.defaults.conf +
