Commit b2a250ce authored by Oran Agra's avatar Oran Agra
Browse files

Redis 7.0.5

parent fa6815e1
...@@ -12,6 +12,49 @@ SECURITY: There are security fixes in the release. ...@@ -12,6 +12,49 @@ SECURITY: There are security fixes in the release.
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
================================================================================
Redis 7.0.5 Released Wed Sep 21 20:00:00 IST 2022
================================================================================
Upgrade urgency: SECURITY, contains fixes to security issues.
Security Fixes:
* (CVE-2022-35951) Executing a XAUTOCLAIM command on a stream key in a specific
state, with a specially crafted COUNT argument, may cause an integer overflow,
a subsequent heap overflow, and potentially lead to remote code execution.
The problem affects Redis versions 7.0.0 or newer
[reported by Xion (SeungHyun Lee) of KAIST GoN].
Module API changes
==================
* Fix RM_Call execution of scripts when used with M/W/S flags to properly
handle script flags (#11159)
* Fix RM_SetAbsExpire and RM_GetAbsExpire API registration (#11025, #8564)
Bug Fixes
=========
* Fix a hang when eviction is combined with lazy-free and maxmemory-eviction-tenacity is set to 100 (#11237)
* Fix a crash when a replica may attempt to set itself as its master as a result of a manual failover (#11263)
* Fix a bug where a cluster-enabled replica node may permanently set its master's hostname to '?' (#10696)
* Fix a crash when a Lua script returns a meta-table (#11032)
Fixes for issues in previous releases of Redis 7.0
--------------------------------------------------
* Fix redis-cli to do DNS lookup before sending CLUSTER MEET (#11151)
* Fix crash when a key is lazy expired during cluster key migration (#11176)
* Fix AOF rewrite to fsync the old AOF file when a new one is created (#11004)
* Fix some crashes involving a list containing entries larger than 1GB (#11242)
* Correctly handle scripts with a non-read-only shebang on a cluster replica (#11223)
* Fix memory leak when unloading a module (#11147)
* Fix bug with scripts ignoring client tracking NOLOOP (#11052)
* Fix client-side tracking breaking protocol when FLUSHDB / FLUSHALL / SWAPDB is used inside MULTI-EXEC (#11038)
* Fix ACL: BITFIELD with GET and also SET / INCRBY can be executed with read-only key permission (#11086)
* Fix missing sections for INFO ALL when also requesting a module info section (#11291)
================================================================================ ================================================================================
Redis 7.0.4 Released Monday Jul 18 12:00:00 IST 2022 Redis 7.0.4 Released Monday Jul 18 12:00:00 IST 2022
================================================================================ ================================================================================
......
...@@ -225,7 +225,7 @@ struct commandHelp { ...@@ -225,7 +225,7 @@ struct commandHelp {
8, 8,
"6.2.0" }, "6.2.0" },
{ "CLIENT KILL", { "CLIENT KILL",
"[ip:port] [ID client-id] [TYPE NORMAL|MASTER|SLAVE|REPLICA|PUBSUB] [USER username] [ADDR ip:port] [LADDR ip:port] [SKIPME yes/no]", "ip:port|[ID client-id]|[TYPE NORMAL|MASTER|SLAVE|REPLICA|PUBSUB]|[USER username]|[ADDR ip:port]|[LADDR ip:port]|[SKIPME yes/no] [[ID client-id]|[TYPE NORMAL|MASTER|SLAVE|REPLICA|PUBSUB]|[USER username]|[ADDR ip:port]|[LADDR ip:port]|[SKIPME yes/no] ...]",
"Kill the connection of a client", "Kill the connection of a client",
8, 8,
"2.4.0" }, "2.4.0" },
...@@ -540,12 +540,12 @@ struct commandHelp { ...@@ -540,12 +540,12 @@ struct commandHelp {
10, 10,
"2.6.0" }, "2.6.0" },
{ "EVALSHA_RO", { "EVALSHA_RO",
"sha1 numkeys key [key ...] arg [arg ...]", "sha1 numkeys [key [key ...]] [arg [arg ...]]",
"Execute a read-only Lua script server side", "Execute a read-only Lua script server side",
10, 10,
"7.0.0" }, "7.0.0" },
{ "EVAL_RO", { "EVAL_RO",
"script numkeys key [key ...] arg [arg ...]", "script numkeys [key [key ...]] [arg [arg ...]]",
"Execute a read-only Lua script server side", "Execute a read-only Lua script server side",
10, 10,
"7.0.0" }, "7.0.0" },
...@@ -580,12 +580,12 @@ struct commandHelp { ...@@ -580,12 +580,12 @@ struct commandHelp {
9, 9,
"6.2.0" }, "6.2.0" },
{ "FCALL", { "FCALL",
"function numkeys key [key ...] arg [arg ...]", "function numkeys [key [key ...]] [arg [arg ...]]",
"Invoke a function", "Invoke a function",
10, 10,
"7.0.0" }, "7.0.0" },
{ "FCALL_RO", { "FCALL_RO",
"function numkeys key [key ...] arg [arg ...]", "function numkeys [key [key ...]] [arg [arg ...]]",
"Invoke a read-only function", "Invoke a read-only function",
10, 10,
"7.0.0" }, "7.0.0" },
...@@ -1590,7 +1590,7 @@ struct commandHelp { ...@@ -1590,7 +1590,7 @@ struct commandHelp {
14, 14,
"6.2.0" }, "6.2.0" },
{ "XCLAIM", { "XCLAIM",
"key group consumer min-idle-time id [id ...] [IDLE ms] [TIME unix-time-milliseconds] [RETRYCOUNT count] [FORCE] [JUSTID]", "key group consumer min-idle-time id [id ...] [IDLE ms] [TIME unix-time-milliseconds] [RETRYCOUNT count] [FORCE] [JUSTID] [LASTID id]",
"Changes (or acquires) ownership of a message in a consumer group, as if the message was delivered to the specified consumer.", "Changes (or acquires) ownership of a message in a consumer group, as if the message was delivered to the specified consumer.",
14, 14,
"5.0.0" }, "5.0.0" },
......
#define REDIS_VERSION "7.0.4" #define REDIS_VERSION "7.0.5"
#define REDIS_VERSION_NUM 0x00070004 #define REDIS_VERSION_NUM 0x00070005
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment