- Addresses multiple heap buffer overflow vulnerabilities (CVE‑2021‑41099,‑32762,‑32687,‑32628,‑32627) affecting string commands, CLI, intsets, ziplist, and streams when non‑default large configuration values are used.
- Fixes a denial‑of‑service issue (CVE‑2021‑32675) triggered by RESP payloads with many elements across many connections.
- Resolves Lua debugger and script heap read/overflow bugs (CVE‑2021‑32672,‑32626).
Community impact
Community ratings: 0 Useful, 0 Noise, 0 Risky, 0 Broke, 0 Try.