redis-7.2.7-1.fc40

Read Time:41 Second

FEDORA-2025-72fd0442cc

Packages in this update:

redis-7.2.7-1.fc40

Update description:

Redis 7.2.7 Released Mon 6 Jan 2025 12:30:00 IDT

Upgrade urgency SECURITY: See security fixes below.

Security fixes

(CVE-2024-46981) Lua script commands may lead to remote code execution
(CVE-2024-51741) Denial-of-service due to malformed ACL selectors

Bug fixes

13380 Possible crash due to OOM panic on invalid command
13338 Streams: XINFO lag field is wrong when tombstone is after the last_id of the consume group
13473 Streams: XTRIM does not update the maximal tombstone, leading to an incorrect lag
13311 Cluster: crash due to unblocking client during slot migration
13443 Cluster: crash when loading cluster config
13422 Cluster: CLUSTER SHARDS returns empty array
13465 Cluster: incompatibility with older node versions

Read More