Redis 6.2.23

6.2.23
Security 1
  • Fix a crafted stream RESTORE payload vulnerability that could make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution

From Redis

Update urgency: SECURITY: There is a security fix in the release.

Security fixes
  • A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution
View original

Upgraded? How did it go?

Discussion