6.0.14
版本发布时间: 2021-06-01 22:06:24
redis/redis最新发布版本:8.0-m02(2024-11-04 17:16:21)
Upgrade urgency: SECURITY, Contains fixes to security issues that affect authenticated client connections. MODERATE otherwise.
Fix integer overflow in STRALGO LCS (CVE-2021-32625) An integer overflow bug in Redis version 6.0 or newer can be exploited using the STRALGO LCS command to corrupt the heap and potentially result with remote code execution. This is a result of an incomplete fix by CVE-2021-29477.
Other bug fixes:
- Fix crash in UNLINK on a stream key with deleted consumer groups (#8932)
- SINTERSTORE: Add missing keyspace del event when none of the sources exist (#8949)