Changes.Watch

Python changelog digest

Jan 6 - Jan 12, 2025. Useful releases, risky migrations, and noisy updates from the Python channel.

No matching updates in this bucket.

Python updates in 2025-w02

7.4.2

  • Fixed critical security vulnerabilities (CVE‑2024‑46981 remote code execution, CVE‑2024‑51741 denial‑of‑service) and related ACL selector DoS.
  • Resolved multiple stability bugs including crashes in module memory defragmentation, cluster config loading, incorrect hash key expiration counts, and a memory leak on failed RDB loads.
  • Corrected stream inconsistencies (XINFO lag, XTRIM tombstone handling) and fixed cluster command issues (CLUSTER SHARDS empty array, SORT … GET error message).

7.2.7

  • Critical security fixes addressing remote code execution (CVE‑2024‑51741) and denial‑of‑service vulnerabilities (CVE‑2024‑46981).
  • Multiple stability bugs resolved, including OOM crashes, stream lag/tombstone inaccuracies, XTRIM misbehavior, and various cluster crash and compatibility issues.

6.2.17

  • Security fix for CVE‑2024‑46981 addressing remote code execution via Lua script commands
  • Upgrade recommended due to security urgency