Redis 7.2.15

7.2.15
Security 1
  • Fix a crafted stream RESTORE payload vulnerability that could cause two consumers to share the same NACK, leading to a use-after-free that may result in Remote Code Execution

From Redis

Update urgency: SECURITY: There is a security fix in the release.

Security fixes
  • A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution
View original

Upgraded? How did it go?

Discussion