Redis 7.0.10 Released with Security Fixes and Bug Corrections
Redis version 7.0.10 has been released, addressing a critical security vulnerability (CVE‑2023‑28425) in the MSETNX command, fixing several bugs including memory‑usage issues with large stream nodes and client reply handling, and providing updated release notes on GitHub.
Redis 7.0.10 has been released, bringing a set of security and bug fixes to improve stability and safety.
Security Fixes:
(CVE-2023-28425) A crafted MSETNX command could trigger an assertion failure and cause a denial‑of‑service.
Bug Fixes:
Copying large blocks in the client output buffer could cause PSYNC loops and unnecessary memory usage ( #11666 ).
Fixed CLIENT REPLY OFF|SKIP to avoid silencing push notifications ( #11875 ).
When the stream exceeds stream-node-max-bytes , trimming excess memory usage in stream nodes ( #11885 ).
Fixed module RM_Call command failure when maxmemory is set to zero due to OOM ( #11319 ).
For detailed release notes, see the GitHub page: https://github.com/redis/redis/releases/tag/7.0.10 .
Laravel Tech Community
Specializing in Laravel development, we continuously publish fresh content and grow alongside the elegant, stable Laravel framework.
How this landed with the community
Was this worth your time?
0 Comments
Thoughtful readers leave field notes, pushback, and hard-won operational detail here.