Zkteco Home Redis Windows Versions Save

Fixed known issues

Fixed Lua issue Fixed known issues

Bug fixes

Fix crash when running rebalance command in a mixed cluster of 7.0 and 7.2 nodes Fix the return type of the slot number in cluster shards to integer, which makes it consistent with past behavior Fix CLUSTER commands are called from modules or scripts to return TLS info appropriately

Fixed rdb and aof crash issue

Upgrade urgency: SECURITY, contains fixes to security issues.

Actually there are some crash issues(PhysicalMapMemory: VirtualFree failed) in Redis 3.2 and Redis 5.0.x for Windows,.sometimes and under some conditions it will crash,we tested that and got conclusion;

After a long research, we found the root cause and fixed VirtualFree failed issue already

Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:

(CVE-2023-25155) Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. (CVE-2022-36021) String matching commands (like SCAN or KEYS) with a specially crafted pattern to trigger a denial-of-service attack on Redis, causing it to hang and consume 100% CPU time.

Bug Fixes

Fix a crash when reaching the maximum invalidations limit of client-side tracking Fix a crash when SPUBLISH is used after passing the cluster-link-sendbuf-limit Fix possible memory corruption in FLUSHALL when a client watches more than one key Fix cluster inbound link keepalive time Flush propagation list in active-expire of writable replicas to fix an assertion Avoid propagating DEL of lazy expire from SCAN and RANDOMKEY as MULTI-EXEC

Performance and resource utilization improvements

Avoid realloc to reduce size of strings when it is unneeded Improve CLUSTER SLOTS reply efficiency for non-continuous slots

Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:

(CVE-2022-35977) Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands can drive Redis to OOM panic (CVE-2023-22458) Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands can lead to denial-of-service

Bug Fixes

Avoid possible hang when client issues long KEYS, SRANDMEMBER, HRANDFIELD, and ZRANDMEMBER commands and gets disconnected by client output buffer limit Make sure that fork child doesn't do incremental rehashing Fix a bug where blocking commands with a sub-second timeout would block forever Fix sentinel issue if replica changes IP

Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:

(CVE-2022-35977) Integer overflow in the Redis SETRANGE and SORT/SORT_RO commands can drive Redis to OOM panic (CVE-2023-22458) Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER commands can lead to denial-of-service

Bug Fixes

Avoid possible hang when client issues long KEYS, SRANDMEMBER, HRANDFIELD, and ZRANDMEMBER commands and gets disconnected by client output buffer limit Make sure that fork child doesn't do incremental rehashing Fix a bug where blocking commands with a sub-second timeout would block forever Fix sentinel issue if replica changes IP