Upgrade urgency SECURITY: This release includes security fixes we recommend you
apply as soon as possible.
Bug fixes
- Fix a build issue with RDMA when using additional make parameters. (#1074)
- Fix an issue where
CLUSTER SLOTS
might return the wrong tcp or tls port when called
from inside a script or from a module. (#1072) - Fix a crash when
CLUSTER SLOTS
orCLUSTER SHARDS
is called from inside
a script or from a module. (#1063) - Fix a build issue on systems where
<threads.h>
is unavailable. (#1053) - Fix an issue with the default
sentinel.conf
being invalid. (#1040)
Packaging Improvements
- Build binary releases with systemd support. (#1107)
- Avoid .c, .d and .o files from being copied to the binary tar.gz releases. (#1106)
Security fixes
- (CVE-2024-31449) Lua library commands may lead to stack overflow and potential RCE.
- (CVE-2024-31227) Potential Denial-of-service due to malformed ACL selectors.
- (CVE-2024-31228) Potential Denial-of-service due to unbounded pattern matching.