This is a security fix release. All users of hiredis-py 3.4.x are strongly encouraged to upgrade.

🔒 Security Fixes

Updates the bundled hiredis C library to v1.4.1, which fixes:

• Prevent arbitrarily nested replies from causing a stack overflow (redis/hiredis#1340)
• Protect against overflow of map elements (redis/hiredis#1341)

Acknowledgements

Vulnerability discovered by He Huang (hehuang@swin.edu.au), Swinburne University of Technology, Melbourne, Australia; discovered using NexusSan.