1.4.1

This is a security fix release. All users of hiredis 1.4.x are strongly encouraged to upgrade.

🔒 Security Fixes

• Prevent arbitrarily nested replies from causing a stack overflow (#1340)
• Protect against overflow of map elements (#1341)

Acknowledgements

Vulnerability discovered by He Huang (hehuang@swin.edu.au), Swinburne University of Technology, Melbourne, Australia; discovered using NexusSan.

1.3.1

This is a security fix release. All users of hiredis 1.3.x are strongly encouraged to upgrade.

🔒 Security Fixes

• Prevent arbitrarily nested replies from causing a stack overflow (#1339)
• Protect against overflow of map elements (#1342)

Acknowledgements

Vulnerability discovered by He Huang (hehuang@swin.edu.au), Swinburne University of Technology, Melbourne, Australia; discovered using NexusSan.

1.2.1

This is a security fix release. All users of hiredis 1.2.x are strongly encouraged to upgrade.

🔒 Security Fixes

• Prevent arbitrarily nested replies from causing a stack overflow (#1338)
• Protect against overflow of map elements (#1343)

🧰 Maintenance

• Update minimum CMake version to 3.7 (#1347)

Acknowledgements

Vulnerability discovered by He Huang (hehuang@swin.edu.au), Swinburne University of Technology, Melbourne, Australia; discovered using NexusSan.

1.1.1

This is a security fix release. All users of hiredis 1.1.x are strongly encouraged to upgrade.

🔒 Security Fixes

• Prevent arbitrarily nested replies from causing a stack overflow (#1337)
• Protect against overflow of map elements (#1344)

🧰 Maintenance

• Rework searching for OpenSSL (#1348)
• Update minimum CMake version to 3.7 (#1349)

Acknowledgements

Vulnerability discovered by He Huang (hehuang@swin.edu.au), Swinburne University of Technology, Melbourne, Australia; discovered using NexusSan.

1.4.0

Changes

🚀 Improvements

• Increase required cmake version to 3.15 @memark (#1325)
• Use ffc (pure-C99) as the RESP3 double parser instead of strtod @fcostaoliveira (#1328)
• FetchContent should not include cpack @koenvandesande (#1307)
• Add C++ compatibility to sds.h @JonasKruckenberg (#1310)
• Apply FD_CLOEXEC on sockets @lennyly (#1301)

🐛 Bug Fixes

• fix: add NULL check for c->funcs in redisReconnect @ghost (#1326)
• Fix buffer overflow in tests. @collinfunk (#1299)

🧰 Maintenance

• Fix CI for macOS and docker based runs. @michael-grunder (#1308)
• Fix CI on MacOS runners. @collinfunk (#1300)
• Define ssize_t as intptr_t in Windows @feihongmeilian (#1298)

Contributors

We'd like to thank all the contributors who worked on this release!

@JonasKruckenberg, @collinfunk, @fcostaoliveira, @feihongmeilian, @koenvandesande, @lennyly, @memark, @michael-grunder, @uglide and Charlie Tonneslan

1.3.0

Changes

• Change the version of the library to 1.3 @StefanPalashev (#1296)
• Use GitHub Releases to track changelogs @uglide (#1294)
• Update minimum CMake version to 3.7 @uglide (#1292)
• Make test.sh use REDIS_SERVER everywhere @opoplawski (#1276)
• Test for both EAGAIN and EINPROGRESS for AF_UNIX sockets. @michael-grunder (#1262)
• Fix timing based macOS CI failure. @michael-grunder (#1275)
• CentOS 7 is EOL @michael-grunder (#1274)
• Clarify macos adapter and example license. @michael-grunder (#1273)
• Only override context read/write funcs on SSL_connect success. @michael-grunder (#1254)
• Remove dead assignment in sdstrim. @michael-grunder (#1255)
• Fix memory leak. @AgranatMarkit (#1238)

🚀 New Features

• Add support of RESP3 attribute type @git-hulk (#1248)
• Make redisEnableKeepAlive a no-op on AF_UNIX connections. @michael-grunder (#1215)

🐛 Bug Fixes

• Retry poll(2) if we are intterupted. @michael-grunder (#1213)

🧰 Maintenance

• Fix OPENSSL_IS_BORINGSSL define check on windows @mGaosi (#1297)
• Remove format_command_fuzzer.c @michael-grunder (#1295)
• Makefile: correctly handle version suffixes on macOS @ZhongRuoyu (#1257)
• Do not explicitly initialize openSSL in newer versions @crrodriguez (#1283)
• Update old link for modules-api-ref.md @dwdougherty (#1279)
• fix: typos @testwill (#1251)
• [cmake] Fix cmake options position to support cmake toolchain @uilianries (#1250)
• CMakeList: add option to not install NuGet packaging @yann-morin-1998 (#1246)
• Fix macOS and FreeBSD CI runners. @michael-grunder (#1247)
• Integrating spellcheck into CI @chayim (#1218)
• Add a panic helper for non-assert aborts. @michael-grunder (#1212)
• Document poll(2) logic changes. @michael-grunder (#1214)
• Fix a false positive warning of gcc 12+ -Werror=maybe-uninitialized @eitlane (#1209)
• Allow disabling the -Werror flag. @Romain-Geissler-1A (#1210)
• Bump development SONAME. @michael-grunder (#1208)

Contributors

We'd like to thank all the contributors who worked on this release!

@AgranatMarkit, @Romain-Geissler-1A, @StefanPalashev, @ZhongRuoyu, @chayim, @crrodriguez, @dwdougherty, @eitlane, @git-hulk, @mGaosi, @michael-grunder, @opoplawski, @testwill, @uglide, @uilianries, @yann-morin-1998 and StefanPalashev

1.2.0

Changes

Breaking Changes

• Remove support in deprecated TLS versions 1.0 and 1.1 @valentinogeron (#1205)

🚀 New Features

• Add sdevent adapter @Oipo (#1144)
• Add RedisModule adapter @tezc (#1182)
• Helper for setting TCP_USER_TIMEOUT socket option @zuiderkwast (#1188)
• Allow specifying the keepalive interval @michael-grunder (#1168)

🐛 Bug Fixes

• Fix a typo in b6a052f. @yossigo (#1190)
• Fix wincrypt symbols conflict @hudayou (#1151)
• Don't attempt to set a timeout if we are in an error state. @michael-grunder (#1180)
• Accept -nan per the RESP3 spec recommendation. @michael-grunder (#1178)
• Fix colliding option values @zuiderkwast (#1172)

🧰 Maintenance

• Version 1.2.0 @chayim (#1202)
• Remove support in deprecated TLS versions 1.0 and 1.1 @valentinogeron (#1205)
• Install major version symlink of shared objects. @yossigo (#1204)
• Add a test for the TCP_USER_TIMEOUT option. @michael-grunder (#1192)
• Add -Werror as a default. @yossigo (#1193)
• CI: Update homebrew Redis version. @yossigo (#1191)
• Fix typo in makefile. @michael-grunder (#1179)
• Write a version file for the CMake package @Neverlord (#1165)
• Cmake static or shared @autoantwort (#1160)
• Fix typo @tillkruss (#1153)
• CMakeLists.txt: respect BUILD_SHARED_LIBS @ffontaine (#1147)
• Add a test ensuring we don't clobber connection error. @michael-grunder (#1181)
• Search for openssl on macOS @michael-grunder (#1169)
• Ensure functionality without _MSC_VER definition @windyakin (#1194)

Contributors

We'd like to thank all the contributors who worked on this release!

@Neverlord, @Oipo, @autoantwort, @chayim, @ffontaine, @hudayou, @michael-grunder, @postgraph, @tezc, @tillkruss, @valentinogeron, @vityafx, @windyakin, @yossigo and @zuiderkwast

1.1.0

🐛 Bug Fixes

• Add support for nan in RESP3 double @filipecosta90 (#1133)

🧰 Maintenance

• Add an example that calls redisCommandArgv @michael-grunder (#1140)
• fix flag reference @pata00 (#1136)
• Make freeing a NULL redisAsyncContext a no-op. @michael-grunder (#1135)
• CI updates @bjosv (#1139)

Contributors

We'd like to thank all the contributors who worked on this release!

@bjosv, @filipecosta90, @michael-grunder, @pata00 and dachui

1.1.0-rc1

1.1.0-rc1

Announcing Hiredis v1.1.0-rc1, with better SSL convenience, new async adapters, and a great many bug fixes.

🚀 New Features

• Add possibility to prefer IPv6, IPv4 or unspecified @zuiderkwast (#1096)
• Add adapters/libhv @ithewei (#904)
• Add timeout support to libhv adapter. @michael-grunder (#1109)
• set default SSL verification path @adobeturchenko (#928)
• Introduce .close method for redisContextFuncs @pizhenwei (#1094)
• Make it possible to set SSL verify mode @stanhu (#1085)
• Polling adapter and example @kristjanvalur (#932)
• Unsubscribe handling in async @bjosv (#1047)
• Add timeout support for libuv adapter @MichaelSuen-thePointer (#1016)

🐛 Bug Fixes

• Update for MinGW cross compile @bit0fun (#1127)
• fixed CPP build error with adapters/libhv.h @mtdxc (#1125)
• Fix protocol error @michael-grunder, @mtuleika-appcast (#1106)
• Use a windows specific keepalive function. @michael-grunder (#1104)
• Fix CMake config path on Linux. @xkszltl (#989)
• Fix potential fault at createDoubleObject @afcidk (#964)
• Fix some undefined behavior @jengab (#1091)
• Copy OOM errors to redisAsyncContext when finding subscribe callback @bjosv (#1090)
• Maintain backward compatibility with our onConnect callback. @michael-grunder (#1087)
• Fix PUSH handler tests for Redis >= 7.0.5 @michael-grunder (#1121)
• fix heap-buffer-overflow @zhangtaoXT5 (#957)
• Fix heap-buffer-overflow issue in redisvFormatCommad @bjosv (#1097)
• Polling adapter requires sockcompat.h @michael-grunder (#1095)
• Illumos test fixes, error message difference for bad hostname test. @devnexen (#901)
• Remove semicolon after do-while in _EL_CLEANUP @sundb (#905)
• Stability: Support calling redisAsyncCommand and redisAsyncDisconnect from the onConnected callback @kristjanvalur (#931)
• Fix async connect on Windows @kristjanvalur (#1073)
• Fix warnings on Win64 @orgads (#1058)
• Handle push notifications before or after reply. @yossigo (#1062)
• Update hiredis sds with improvements found in redis @bjosv (#1045)
• Avoid incorrect call to the previous reply's callback @bjosv (#1040)
• fix building on AIX and SunOS (#1031) @scddev (#1043)
• Allow sending commands after sending an unsubscribe @bjosv (#1036)
• Correction for command timeout during pubsub @bjosv (#1038)
• Fix adapters/libevent.h compilation for 64-bit Windows @pbtummillo (#937)
• Fix integer overflow when format command larger than 4GB @sundb (#1030)
• Handle array response during subscribe in RESP3 @bjosv (#1014)
• Support PING while subscribing (RESP2) @bjosv (#1027)

🧰 Maintenance

• CI fixes in preparation of release @michael-grunder (#1130)
• Add do while(0) protection for macros @afcidk (#959)
• Fixup of PR734: Coverage of hiredis.c @bjosv (#1124)
• CMake corrections for building on Windows @bjosv (#1122)
• Install on windows fixes @bjosv (#1117)
• Add libhv example to our standard Makefile @michael-grunder (#1108)
• Additional include directory given by pkg-config @bjosv (#1118)
• Use attribute when building with Clang on Windows @bjosv (#1115)
• Minor refactor @michael-grunder (#1110)
• Fix pkgconfig result for hiredis_ssl @bjosv (#1107)
• Update documentation to explain redisConnectWithOptions. @michael-grunder (#1099)
• uvadapter: reduce number of uv_poll_start calls @noxiouz (#1098)
• Regression test for off-by-one parsing error @bugwz (#1092)
• CMake: remove dict.c form hiredis_sources @Lipraxde (#1055)
• Do store command timeout in the context for redisSetTimeout @catterer (#593, #1093)
• Add GitHub Actions CI workflow for hiredis: Arm, Arm64, 386, windows. @kristjanvalur (#943)
• CI: bump macOS runner version @SukkaW (#1079)
• Support for generating release notes @chayim (#1083)
• Improve example for SSL initialization in README.md @stanhu (#1084)
• Fix README typos @bjosv (#1080)
• fix cmake version @smmir-cent (#1050)
• Use the same name for static and shared libraries @orgads (#1057)
• Embed debug information in windows static .lib file @kristjanvalur (#1054)
• Improved async documentation @kristjanvalur (#1074)
• Fix tests so they work for Redis 7.0 @michael-grunder (#1072)
• Use official repository for Redis package. @yossigo (#1061)
• Whitelist hiredis repo path in cygwin @michael-grunder (#1063)
• CentOS 8 is EOL, switch to RockyLinux @michael-grunder (#1046)
• CMakeLists.txt: allow building without a C++ compiler @ffontaine (#872)
• Makefile: move SSL options into a block and refine rules @pizhenwei (#997)
• Update CMakeLists.txt for more portability @EricDeng1001 (#1005)
• FreeBSD build fixes + CI @michael-grunder (#1026)
• Add asynchronous test for pubsub using RESP3 @bjosv (#1012)
• Trigger CI failure when Valgrind issues are found @bjosv (#1011)
• Move to using make directly in Cygwin @michael-grunder (#1020)
• Add asynchronous API tests @bjosv (#1010)
• Correcting the build target coverage for enabled SSL @bjosv (#1009)
• GH Actions: Run SSL tests during CI @bjosv (#1008)
• GH: Actions - Add valgrind and CMake @michael-grunder (#1004)
• Add Centos8 tests in GH Actions @michael-grunder (#1001)
• We should run actions on PRs @michael-grunder (#1000)
• Add Cygwin test in GitHub actions @michael-grunder (#999)
• Add Windows tests in GitHub actions @michael-grunder (#996)
• Switch to GitHub actions @michael-grunder (#995)
• Minor refactor of CVE-2021-32765 fix. @michael-grunder (#993)
• Remove extra comma from CMake var. @xkszltl (#988)
• Add REDIS_OPT_PREFER_UNSPEC @michael-grunder (#1101)

Contributors

We'd like to thank all the contributors who worked on this release!

@EricDeng1001, @Lipraxde, @MichaelSuen-thePointer, @SukkaW, @adobeturchenko, @afcidk,
@bit0fun, @bjosv, @bugwz, @catterer, @chayim, @devnexen, @ffontaine, @ithewei, @jengab,
@kristjanvalur, @michael-grunder, @noxiouz, @mtdxc, @orgads, @pbtummillo, @pizhenwei,
@scddev, @smmir-cent, @stanhu, @sundb, @vturchenko, @xkszltl, @yossigo, @zhangtaoXT5,
@zuiderkwast

1.0.2

Upgrade urgency: SECURITY, contains fixes to security issues.

• Fix for CVE-2021-32765 which is integer overflow to buffer overflow bug.