Redis 8.10.1 → 8.10.3
2 releases · 0 breaking changes · 6 security fixes · 0 advisories fixed
6security0breaking0deprecated0feature0fix
Breaking changes
None in the release notes.
Security changes
- security Heap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode in 8.10.3
- security #15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed in 8.10.2
- security #15722 The cluster bus protocol has no authentication of its own unless tls-cluster is enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the new… in 8.10.2
- security TimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload in 8.10.2
- security RedisSearch: KNN queries on indexes with very long vector field names could cause the server to crash in 8.10.2
- security Vector Sets: Deeply nested JSON used in Vector Set queries could cause the server to crash in 8.10.2
Every release in between
securityHeap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode
security#15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed
security#15722 The cluster bus protocol has no authentication of its own unless tls-cluster is enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the new…
securityTimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload
securityRedisSearch: KNN queries on indexes with very long vector field names could cause the server to crash
securityVector Sets: Deeply nested JSON used in Vector Set queries could cause the server to crash