Redis 7.4.10

7.4.10
Security 1
  • Fix a use-after-free vulnerability in stream RESTORE that could result in Remote Code Execution when a crafted payload causes two consumers to share the same NACK

From Redis

Update urgency: SECURITY: There is a security fix in the release.

Security fixes
  • A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution
View original

Upgraded? How did it go?

Discussion