megachangelog
Security8.4.5

Security fixes for RESTORE command and RedisBloom payloads

This release addresses critical security vulnerabilities including a use-after-free issue in stream consumer group restoration that could lead to remote code execution, and out-of-bounds writes in RedisBloom and TDigest. It also fixes Cuckoo Filter data loss on failover by properly replicating CF.LOADCHUNK data chunks.

SECURITY: There are security fixes in the release.

Security fixes

  • Use-after-free when loading a stream consumer group via RESTORE may lead to Remote Code Execution
  • RedisBloom/RedisBloom#1039 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution

Bug fixes

securityredisrcestreamsredisbloom

Source: original entry ↗