Catalog / Valkey

7.2.7

2 years agosecurityfixedchangedOriginal notes

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.

Bug fixes

  • Prevented AOF from being incorrectly disabled after loading RDB data, ensuring proper re-enabling of AOF. (#1001)
  • Resolved issues in replicationSetPrimary where the primary node's IP/port updates were not correctly handled in the cluster gossip section. (#965)

Packaging Improvements

  • Build binary releases with systemd support. (#1107)
  • Avoid .c, .d and .o files from being copied to the binary tar.gz releases. (#1106)

Security fixes

  • (CVE-2024-31449) Lua library commands may lead to stack overflow and potential RCE.
  • (CVE-2024-31227) Potential Denial-of-service due to malformed ACL selectors.
  • (CVE-2024-31228) Potential Denial-of-service due to unbounded pattern matching.