From 6ed4dc5052488ba88d2b759d494b2d8083a46206 Mon Sep 17 00:00:00 2001 From: Oran Agra Date: Wed, 27 Apr 2022 11:56:31 +0300 Subject: [PATCH] Redis 6.0.17 --- 00-RELEASENOTES | 19 +++++++++++++++++++ src/version.h | 4 ++-- 2 files changed, 21 insertions(+), 2 deletions(-) diff --git a/00-RELEASENOTES b/00-RELEASENOTES index 2e24e2ead..ae5d2ff09 100644 --- a/00-RELEASENOTES +++ b/00-RELEASENOTES @@ -11,6 +11,25 @@ CRITICAL: There is a critical bug affecting MOST USERS. Upgrade ASAP. SECURITY: There are security fixes in the release. -------------------------------------------------------------------------------- +================================================================================ +Redis 6.0.17 Released Tue Jan 17 12:00:00 IDT 2023 +================================================================================ + +Upgrade urgency: SECURITY, contains fixes to security issues. + +Security Fixes: +* (CVE-2022-35977) Integer overflow in the Redis SETRANGE and SORT/SORT_RO + commands can drive Redis to OOM panic + +Bug Fixes +========= + +* Avoid hang when client issues long SRANDMEMBER command and gets + disconnected by client output buffer limit (#11676) +* Lua: fix crash on a script call with many arguments, a regression in v6.0.16 (#9809) +* Lua: Add checks for min-slave-* configs when evaluating Lua scripts (#10160) +* Fix BITFIELD overflow detection on some compilers due to undefined behavior (#9601) + ================================================================================ Redis 6.0.16 Released Mon Oct 4 12:00:00 IDT 2021 ================================================================================ diff --git a/src/version.h b/src/version.h index b526e0b8d..60428abfb 100644 --- a/src/version.h +++ b/src/version.h @@ -1,2 +1,2 @@ -#define REDIS_VERSION "6.0.16" -#define REDIS_VERSION_NUM 0x00060010 +#define REDIS_VERSION "6.0.17" +#define REDIS_VERSION_NUM 0x00060011