From d2c8a4b91e8c0e6aefd1f5bc0bf582cddbe046b7 Mon Sep 17 00:00:00 2001 From: Oran Agra Date: Tue, 9 Jan 2024 08:49:03 +0200 Subject: [PATCH] Redis 7.2.4 --- 00-RELEASENOTES | 20 ++++++++++++++++++++ src/version.h | 4 ++-- 2 files changed, 22 insertions(+), 2 deletions(-) diff --git a/00-RELEASENOTES b/00-RELEASENOTES index c3aacab281..40efaba57c 100644 --- a/00-RELEASENOTES +++ b/00-RELEASENOTES @@ -12,6 +12,26 @@ SECURITY: There are security fixes in the release. -------------------------------------------------------------------------------- +================================================================================ +Redis 7.2.4 Released Tue 09 Jan 2024 10:45:52 IST +================================================================================ + +Upgrade urgency SECURITY: See security fixes below. + +Security fixes +============== +* (CVE-2023-41056) In some cases, Redis may incorrectly handle resizing of memory + buffers which can result in incorrect accounting of buffer sizes and lead to + heap overflow and potential remote code execution. + +Bug fixes +========= + +* Fix crashes of cluster commands clusters with mixed versions of 7.0 and 7.2 (#12805, #12832) +* Fix slot ownership not being properly handled when deleting a slot from a node (#12564) +* Fix atomicity issues with the RedisModuleEvent_Key module API event (#12733) + + ================================================================================ Redis 7.2.3 Released Wed 01 Nov 2023 12:00:00 IST ================================================================================ diff --git a/src/version.h b/src/version.h index 21e1efaa3d..7c6eea6a4d 100644 --- a/src/version.h +++ b/src/version.h @@ -1,2 +1,2 @@ -#define REDIS_VERSION "7.2.3" -#define REDIS_VERSION_NUM 0x00070203 +#define REDIS_VERSION "7.2.4" +#define REDIS_VERSION_NUM 0x00070204