This is a security fix release. All users of hiredis-py 3.4.x are strongly encouraged to upgrade.
🔒 Security Fixes
Updates the bundled hiredis C library to v1.4.1, which fixes:
- Prevent arbitrarily nested replies from causing a stack overflow (redis/hiredis#1340)
- Protect against overflow of map elements (redis/hiredis#1341)
Acknowledgements
Vulnerability discovered by He Huang (hehuang@swin.edu.au), Swinburne University of Technology, Melbourne, Australia; discovered using NexusSan.