diff options
| author | Oran Agra <oran@redislabs.com> | 2023-02-26 14:50:33 +0200 |
|---|---|---|
| committer | Oran Agra <oran@redislabs.com> | 2023-02-28 18:32:14 +0200 |
| commit | 720ea82eab846abc36651d01cc9f8347d4f42f90 (patch) | |
| tree | fdeb2f19ab7af26fa1d09e30cd63050738eb3f81 | |
| parent | 0a8a45f94d96d0a1286d25438110521b132a55b0 (diff) | |
| download | redis-720ea82eab846abc36651d01cc9f8347d4f42f90.tar.gz | |
Redis 6.2.116.2.11
| -rw-r--r-- | 00-RELEASENOTES | 26 | ||||
| -rw-r--r-- | src/version.h | 4 |
2 files changed, 28 insertions, 2 deletions
diff --git a/00-RELEASENOTES b/00-RELEASENOTES index 78fcc9d60..0a93aa76c 100644 --- a/00-RELEASENOTES +++ b/00-RELEASENOTES @@ -12,6 +12,32 @@ SECURITY: There are security fixes in the release. -------------------------------------------------------------------------------- ================================================================================ +Redis 6.2.11 Released Tue Feb 28 12:00:00 IST 2023 +================================================================================ + +Upgrade urgency: SECURITY, contains fixes to security issues. + +Security Fixes: +* (CVE-2023-25155) Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD + commands can trigger an integer overflow, resulting in a runtime assertion + and termination of the Redis server process. +* (CVE-2022-36021) String matching commands (like SCAN or KEYS) with a specially + crafted pattern to trigger a denial-of-service attack on Redis, causing it to + hang and consume 100% CPU time. + +Bug Fixes +========= + +* Fix a crash when reaching the maximum invalidations limit of client-side tracking (#11814) +* Fix cluster inbound link keepalive time (#11785) +* Make sure that fork child doesn't do incremental rehashing (#11692) + +Performance and resource utilization improvements +================================================= + +* Avoid realloc to reduce size of strings when it is unneeded (#11766) + +================================================================================ Redis 6.2.10 Released Mon Jan 17 12:00:00 IST 2023 ================================================================================ diff --git a/src/version.h b/src/version.h index cacd9167d..11ddece34 100644 --- a/src/version.h +++ b/src/version.h @@ -1,2 +1,2 @@ -#define REDIS_VERSION "6.2.10" -#define REDIS_VERSION_NUM 0x0006020a +#define REDIS_VERSION "6.2.11" +#define REDIS_VERSION_NUM 0x0006020b |