Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:

• (CVE-2023-25155) Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD
  commands can trigger an integer overflow, resulting in a runtime assertion
  and termination of the Redis server process.
• (CVE-2022-36021) String matching commands (like SCAN or KEYS) with a specially
  crafted pattern to trigger a denial-of-service attack on Redis, causing it to
  hang and consume 100% CPU time.

Bug Fixes

• Make sure that fork child doesn't do incremental rehashing (https://github.com/redis/redis/pull/11692)
• Fix cluster inbound link keepalive time (https://github.com/redis/redis/pull/11785)

Hashes

Algorithm : SHA256
Hash : 54D2BA89A637F021BF7455F2E212508B4BCF7BE7247DAB63112493CEA4CB773D
Path : D:\a\redis-windows\redis-windows\Redis-6.0.18-Windows-x64.tar.gz

Algorithm : SHA256
Hash : 8FCAA45C70C547088972BADCFB2108845E2809467FB589485A2BC3DC1D84CA6C
Path : D:\a\redis-windows\redis-windows\Redis-6.0.18-Windows-x64-with-Service.tar.gz

From workflow: https://github.com/redis-windows/redis-windows/actions/runs/5286189764

Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:

• (CVE-2023-25155) Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD
  commands can trigger an integer overflow, resulting in a runtime assertion
  and termination of the Redis server process.
• (CVE-2022-36021) String matching commands (like SCAN or KEYS) with a specially
  crafted pattern to trigger a denial-of-service attack on Redis, causing it to
  hang and consume 100% CPU time.

Bug Fixes

• Fix a crash when reaching the maximum invalidations limit of client-side tracking (https://github.com/redis/redis/pull/11814)
• Fix a crash when SPUBLISH is used after passing the cluster-link-sendbuf-limit (https://github.com/redis/redis/pull/11752)
• Fix possible memory corruption in FLUSHALL when a client watches more than one key (https://github.com/redis/redis/pull/11854)
• Fix cluster inbound link keepalive time (https://github.com/redis/redis/pull/11785)
• Flush propagation list in active-expire of writable replicas to fix an assertion (https://github.com/redis/redis/pull/11615)
• Avoid propagating DEL of lazy expire from SCAN and RANDOMKEY as MULTI-EXEC (https://github.com/redis/redis/pull/11788)

Performance and resource utilization improvements

• Avoid realloc to reduce size of strings when it is unneeded (https://github.com/redis/redis/pull/11766)
• Improve CLUSTER SLOTS reply efficiency for non-continuous slots (https://github.com/redis/redis/pull/11745)

Hashes

Algorithm : SHA256
Hash : 4380EB3C1D3F3F7945D3825AB109C77D0994BF546678E14865C8966CFB4CDF82
Path : D:\a\redis-windows\redis-windows\Redis-7.0.9-Windows-x64.tar.gz

Algorithm : SHA256
Hash : B8FE6960B6859F74A3906324DD780E5371178A7D2FE0C5F4BED6AC10A151835A
Path : D:\a\redis-windows\redis-windows\Redis-7.0.9-Windows-x64-with-Service.tar.gz

From workflow: https://github.com/redis-windows/redis-windows/actions/runs/5286191214

Upgrade urgency: MODERATE, a quick followup fix for a recently released 6.2.9.

Bug Fixes

• Revert the change to KEYS in the recent client output buffer limit fix (https://github.com/redis/redis/pull/11676)

Hashes

Algorithm : SHA256
Hash : D5B55F8AA46E66CBFECED27B86BA0B674BC87A4A6FD4A3D2F128DC01E00159EE
Path : D:\a\redis-windows\redis-windows\Redis-6.2.10-Windows-x64.tar.gz

Algorithm : SHA256
Hash : BB0D19698E1E20DF81AC0FEF51E953D83808989446817FC76767C989C0665D76
Path : D:\a\redis-windows\redis-windows\Redis-6.2.10-Windows-x64-with-Service.tar.gz

From workflow: https://github.com/redis-windows/redis-windows/actions/runs/5286193608

Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:

• (CVE-2022-35977) Integer overflow in the Redis SETRANGE and SORT/SORT_RO
  commands can drive Redis to OOM panic

Bug Fixes

• Avoid hang when client issues long SRANDMEMBER command and gets
  disconnected by client output buffer limit (https://github.com/redis/redis/pull/11676)
• Lua: fix crash on a script call with many arguments, a regression in v6.0.16 (https://github.com/redis/redis/pull/9809)
• Lua: Add checks for min-slave-* configs when evaluating Lua scripts (https://github.com/redis/redis/pull/10160)
• Fix BITFIELD overflow detection on some compilers due to undefined behavior (https://github.com/redis/redis/pull/9601)

Hashes

Algorithm : SHA256
Hash : E47BBF6CC359806B007D56E3C3B61711F91257330170F97B959DAB741F78E4D3
Path : D:\a\redis-windows\redis-windows\Redis-6.0.17-Windows-x64.tar.gz

Algorithm : SHA256
Hash : F9DFA9F02014246B94325460044CF5BF8755290C3A44A71CEC7983E580E36C1C
Path : D:\a\redis-windows\redis-windows\Redis-6.0.17-Windows-x64-with-Service.tar.gz

From workflow: https://github.com/redis-windows/redis-windows/actions/runs/5286195511

Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:

• (CVE-2022-35977) Integer overflow in the Redis SETRANGE and SORT/SORT_RO
  commands can drive Redis to OOM panic
• (CVE-2023-22458) Integer overflow in the Redis HRANDFIELD and ZRANDMEMBER
  commands can lead to denial-of-service

Bug Fixes

• Avoid possible hang when client issues long KEYS, SRANDMEMBER, HRANDFIELD,
  and ZRANDMEMBER commands and gets disconnected by client output buffer limit (https://github.com/redis/redis/pull/11676)
• Make sure that fork child doesn't do incremental rehashing (https://github.com/redis/redis/pull/11692)
• Fix a bug where blocking commands with a sub-second timeout would block forever (https://github.com/redis/redis/pull/11688)
• Fix sentinel issue if replica changes IP (https://github.com/redis/redis/pull/11590)

Hashes

Algorithm : SHA256
Hash : 89D0DD0D0A20E7E63509F4D429DB906E4A5E5AF6AD162238AB7B34862643EEBB
Path : D:\a\redis-windows\redis-windows\Redis-7.0.8-Windows-x64.tar.gz

Algorithm : SHA256
Hash : 6DF24A2A7B0DB86E186CA457C46C84B7219F3D550333D13DB8BDB980E024E65A
Path : D:\a\redis-windows\redis-windows\Redis-7.0.8-Windows-x64-with-Service.tar.gz

From workflow: https://github.com/redis-windows/redis-windows/actions/runs/5286192002

启动脚本：start_redis5.bat基于RunHiddenConsole.exe实现了redis后台无窗口运行，运行前记得修改路径
停止命令：taskkill /F /IM redis-server.exe > nul

默认密码是 root
可在redis.windows.conf的第445行修改requirepass root