Catalog / Redis

8.0.5

11 months agosecurityfixedchangedOriginal notes

Update urgency: HIGH: There are critical bugs that may affect a subset of users.

Bug fixes

  • HGETEX - potential crash when FIELDS is used and numfields is missing
  • Potential crash on HyperLogLog with 2GB+ entries
  • Cuckoo filter - Division by zero in Cuckoo filter insertion
  • Cuckoo filter - Counter overflow
  • Bloom filter - Arbitrary memory read/write with invalid filter
  • Bloom filter - Out-of-bounds access with empty chain
  • Bloom filter - Restore invalid filter [We thank AWS security for responsibly disclosing the security bug]
  • Top-k - Out-of-bounds access