Comment on An unexpected Redis sandbox escape affecting Debian-based distrosparentComments−reginaldoOP4yI reported the "loadstring accepts arbitrary bytecode" issue back to Debian and Ubuntu.But, just to clarify, mikemike's advice is that everyone (i.e. including people running upstream redis) should disable scripting.−throwaway815234yScripting in redis is important since it is how you get transactions.
Comments
I reported the "loadstring accepts arbitrary bytecode" issue back to Debian and Ubuntu.
But, just to clarify, mikemike's advice is that everyone (i.e. including people running upstream redis) should disable scripting.
Scripting in redis is important since it is how you get transactions.