Redis 8.2.11 → 8.6.7
17 releases · 0 breaking changes · 48 security fixes · 0 advisories fixed
48security0breaking0deprecated39feature130fix
Breaking changes
None in the release notes.
Security changes
- security #15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed in 8.6.7
- security #15722 The cluster bus protocol has no authentication of its own unless tls-cluster is enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the new… in 8.6.7
- security TimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload in 8.6.7
- security Vector Sets: Deeply nested JSON used in Vector Set queries could cause the server to crash in 8.6.7
- security (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write in 8.6.6
- security Out-of-bounds access in TopK heap cleanup path (MOD-15410) in 8.6.6
- security Use-after-free in the TLS pending-data list when a command closes another pending connection in 8.6.6
- security #15478 ACL key permission bypass in SORT, GEORADIUS/GEORADIUSBYMEMBER and XREAD/XREADGROUP: the keys validated by ACL could differ from the keys the command actually accesses in 8.6.6
- security A malicious RDB payload with an out-of-range SLOT_INFO slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution in 8.6.6
- security Vector Sets: missing node level validation when loading a vector set from RDB may lead to out-of-bounds access in 8.6.6
- security Vector Sets: use-after-free when VREM mutates the HNSW graph while background VSIM threads are still running in 8.6.6
- security Vector Sets: a negative hnsw_search() return was treated as a huge unsigned count, reading past the end of the result arrays in 8.6.6
- security TLS client certificate authentication bypass: a Common Name containing an embedded NUL byte was truncated, allowing a client to authenticate as another (possibly privileged) ACL user in 8.6.6
- security #15594 Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key in 8.6.6
- security A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution in 8.6.5
- security RedisBloom/RedisBloom#1046 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution in 8.6.5
- security (CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution in 8.6.3
- security (CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote Code Execution in 8.6.3
- security (CVE-2026-23631) Lua Use-After-Free may lead to remote code execution in 8.6.3
- security (CVE-2026-25588) Invalid memory access in RESTORE may lead to Remote Code Execution (Time Series) in 8.6.3
- security (CVE-2026-25589) Invalid memory access in RESTORE may lead to Remote Code Execution (Probabilistic) in 8.6.3
- security A user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply in 8.6.1
- security Heap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode in 8.4.8
- security #15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed in 8.4.7
- security #15722 The cluster bus protocol has no authentication of its own unless tls-cluster is enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the new… in 8.4.7
- security TimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload in 8.4.7
- security Vector Sets: Deeply nested JSON used in Vector Set queries could cause the server to crash in 8.4.7
- security (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write in 8.4.6
- security Out-of-bounds access in TopK heap cleanup path (MOD-15410) in 8.4.6
- security Use-after-free in the TLS pending-data list when a command closes another pending connection in 8.4.6
- security #15478 ACL key permission bypass in SORT, GEORADIUS/GEORADIUSBYMEMBER and XREAD/XREADGROUP: the keys validated by ACL could differ from the keys the command actually accesses in 8.4.6
- security #14847 Out-of-bounds argv access during key extraction when checking ACL permissions of a KEYNUM keyspec command (e.g. EVAL) with wrong arity in 8.4.6
- security A malicious RDB payload with an out-of-range SLOT_INFO slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution in 8.4.6
- security Vector Sets: missing node level validation when loading a vector set from RDB may lead to out-of-bounds access in 8.4.6
- security Vector Sets: use-after-free when VREM mutates the HNSW graph while background VSIM threads are still running in 8.4.6
- security Vector Sets: a negative hnsw_search() return was treated as a huge unsigned count, reading past the end of the result arrays in 8.4.6
- security #15594 Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key in 8.4.6
- security A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution in 8.4.5
- security RedisBloom/RedisBloom#1039 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution in 8.4.5
- security (CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution. in 8.4.3
- security (CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote Code Execution in 8.4.3
- security (CVE-2026-23631) Lua Use-After-Free may lead to remote code execution in 8.4.3
- security (CVE-2026-25588) Invalid memory access in RESTORE may lead to Remote Code Execution (Time Series) in 8.4.3
- security (CVE-2026-25589) Invalid memory access in RESTORE may lead to Remote Code Execution (Probabilistic) in 8.4.3
- security A user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply in 8.4.2
- security RedisTimeSeries/RedisTimeSeries#1837, RedisJSON/RedisJSON#1474 Hide Personally Identifiable Information from server log in 8.4.1
- security RedisBloom/RedisBloom#936 Cuckoo filter: crash on RDB load on 0 buckets (MOD-11593) in 8.4.1
- security RedisBloom/RedisBloom#945 Bloom filter: crash on RDB load on large number of filters (MOD-11590) in 8.4.1
Every release in between
security#15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed
security#15722 The cluster bus protocol has no authentication of its own unless tls-cluster is enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the new…
securityTimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload
securityVector Sets: Deeply nested JSON used in Vector Set queries could cause the server to crash
security(CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write
securityOut-of-bounds access in TopK heap cleanup path (MOD-15410)
securityUse-after-free in the TLS pending-data list when a command closes another pending connection
security#15478 ACL key permission bypass in SORT, GEORADIUS/GEORADIUSBYMEMBER and XREAD/XREADGROUP: the keys validated by ACL could differ from the keys the command actually accesses
securityA malicious RDB payload with an out-of-range SLOT_INFO slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution
securityVector Sets: missing node level validation when loading a vector set from RDB may lead to out-of-bounds access
securityVector Sets: use-after-free when VREM mutates the HNSW graph while background VSIM threads are still running
securityVector Sets: a negative hnsw_search() return was treated as a huge unsigned count, reading past the end of the result arrays
securityTLS client certificate authentication bypass: a Common Name containing an embedded NUL byte was truncated, allowing a client to authenticate as another (possibly privileged) ACL user
security#15594 Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key
securityA crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution
securityRedisBloom/RedisBloom#1046 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution
fixRedisBloom/RedisBloom#1021 Replicate CF.LOADCHUNK data chunks to prevent silent Cuckoo Filter data loss on failover
fix#15175, RediSearch/RediSearch#9262 Redis fails to start on AArch64
fix#15163 MULTI queue memory incorrect memory accounting
fix#15115 Under-copy in the Lua debugger
fix#15094 Cluster crash when CLIENT KILL unsubscribes SSUBSCRIBE client inside EXEC
fix#14963 XREADGROUP: consumer replication inconsistency
fix#14934 Client output buffer memory tracking not accounting for copy-avoided bulk string references
fix#14970 Sentinel config injection via SENTINEL SET
fix#14982 SCAN commands: integer overflow in COUNT parameter
fix#15073 CLIENT TRACKING: self-overlap returning non-zero loop index
fix#15059 Use-after-free
fix#15037 XINFO STREAM: wrong value in the per-slot memory tracking
fix#15034, #15081 Issues processing corrupt RDB data
fix#15021 HEXPIRE: overflow on fields count
fix#14942 Fix COMMAND GETKEYS for PFMERGE with no source keys
fix#15188 cluster-announce-ip rejecting hostnames (regression)
fix#14667, #14886 Potential TCP stalls/deadlocks
fixRediSearch/RediSearch#9484 Shard crash during background index scan of JSON documents with vector fields on Active-Active (CRDT) databases (MOD-15542)
fixRediSearch/RediSearch#9635 Severe latency spikes and shard unresponsiveness when EXPIRE or EXPIREAT operations run concurrently with queries on large indexes (MOD-14930)
security(CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution
security(CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote Code Execution
security(CVE-2026-23631) Lua Use-After-Free may lead to remote code execution
security(CVE-2026-25588) Invalid memory access in RESTORE may lead to Remote Code Execution (Time Series)
security(CVE-2026-25589) Invalid memory access in RESTORE may lead to Remote Code Execution (Probabilistic)
fixSUBSCRIBE, PSUBSCRIBE, SSUBSCRIBE: crash on OOM (RED-167788)
fixCONFIG SET: some settings allow invalid characters (RED-167787)
fixSCRIPT DEBUG: potential crash on scripts (RED-175507)
fixVADD: crash or buffer overflow on large REDUCE value (RED-170921)
fixVSET: crash on huge allocations (MOD-12678)
fixPotential crash on disconnections and TLS failures (Time Series) (MOD-14850)
fixRediSearch/RediSearch#8745 Crash when many keys receive expirations under heavy TTL activity (MOD-14500)
fixRediSearch/RediSearch#8848 HNSW vector index memory growth under high-churn workloads until shard restart (MOD-13761)
fixRediSearch/RediSearch#8205, RediSearch/RediSearch#8259 FT.HYBRID VSIM RANGE + FILTER incorrectly returns zero results (MOD-12370, MOD-13884)
fixRediSearch/RediSearch#9182 FT.PROFILE HYBRID returns an empty reply (MOD-14778)
fixRediSearch/RediSearch#8129, RediSearch/RediSearch#8140 FT.PROFILE reports an incorrect shard total profile time (MOD-13735, MOD-13181)
fixRediSearch/RediSearch#9047 FT.PROFILE output is inconsistent when a profiled value is missing (MOD-10560)
fixRediSearch/RediSearch#8791 FT.EXPLAIN does not lock, causing a race with concurrent index changes (MOD-14461)
fixRediSearch/RediSearch#8382 Crash when indexing negative zero (-0.0) (MOD-13904)
fixRediSearch/RediSearch#8590 FILTER returns inconsistent results with multiple indexes sharing field aliases (MOD-14063)
fixRediSearch/RediSearch#8660 FILTER behavior depends on property order in the expression (MOD-14065)
fixRediSearch/RediSearch#8593 Filter expressions are evaluated for indexes that do not match the document type (MOD-14064)
fixRediSearch/RediSearch#8591 Documents are inconsistently included or excluded depending on the indexing path taken (MOD-13948)
fixRediSearch/RediSearch#8589 RENAME notification handler loads the wrong key, causing stale index entries after a rename (MOD-14328)
fixRediSearch/RediSearch#9012 PERSIST and HPERSIST notifications are not reflected in index expiration tracking (MOD-14800)
fixRediSearch/RediSearch#9079 FT.SPELLCHECK treats PARAMS placeholders as literal terms instead of resolving them (MOD-10596)
fixRediSearch/RediSearch#8462 GC out-of-memory on replica shards leaves the replica in an inconsistent state (MOD-14066)
fixRediSearch/RediSearch#9066 Race condition in FT.HYBRID causes intermittent failures under concurrent hybrid query load (MOD-14732)
fixRediSearch/RediSearch#8109, RediSearch/RediSearch#8149 Configuration registration omits module parameters, causing them to be unexposed or misapplied (RED-171841)
fixRediSearch/RediSearch#9163 Crash on FT.SEARCH when topology validation fails (for example, some nodes unreachable) (MOD-14475)
fixRediSearch/RediSearch#8395 FT.SEARCH fails with "Query requires unavailable slots" after shard restart or failover (MOD-13828)
fixRediSearch/RediSearch#8451 FT.INFO-style output no longer reports zero-index summary data when no indices exist (MOD-14079)
fixRediSearch/RediSearch#9078 FT.CREATE now rejects schema definitions with invalid option combinations at creation time (MOD-14655)
fixRediSearch/RediSearch#8051, RediSearch/RediSearch#8114 Crash diagnostics now include the IndexSpec of the index the failing thread was working on (MOD-7574)
featureRediSearch/RediSearch#8210, RediSearch/RediSearch#8231 FT.PROFILE: added queue time tracking (MOD-13602)
fix#14824 Potential UAF: don't use reply copy avoidance for module strings
fix#14848 Crash during command processing on replicas performing full synchronization
fix#14794 New XIDMPRECORD internal command and AOFRW emission to restore stream IDMP state
fix#14816 setModuleEnumConfig() passing prefixed name to module callbacks
fix#14858 Streams: Ensures XADD with IDMP/IDMPAUTO that hits an existing IID records the metadata change
fix#14855, #14831, #14817 Potential memory leaks
fix#14869 Streams: IDMP cron expiration not working after RDB load
fix#14847 Potential crash during ACL checks on wrong-arity commands
fix#14883 HSETEX, HGETEX do not validate that FIELDS is specified only once
fix#14897 Streams: IDMP-related bugs
securityA user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply
fix#14785 HOTKEYS: The INFO command may display module information, and the missing HOTKEYS HELP subcommand has been added
fix#14789 Bug in RDB loading prevented hash table expansion, increasing load time
otherSubstantial performance improvements
otherSubstantial memory reduction for hashes (hashtable-encoded) and sorted sets (skiplist-encoded)
featureStreams: XADD idempotency (at-most-once guarantee) with new IDMPAUTO and IDMP arguments
featureNew eviction policies - least recently modified: volatile-lrm and allkeys-lrm
featureHot keys detection and reporting; new command: HOTKEYS
otherTLS certificate-based automatic client authentication
featureTime series: support NaN values; new aggregators: COUNTNAN and COUNTALL
otherAlpine and Debian Docker images - https://hub.docker.com/_/redis
otherInstall using snap - see https://github.com/redis/redis-snap
otherInstall using brew - see https://github.com/redis/homebrew-redis
otherInstall using RPM - see https://github.com/redis/redis-rpm
otherInstall using Debian APT - see https://github.com/redis/redis-debian
otherUbuntu 22.04 (Jammy Jellyfish), 24.04 (Noble Numbat)
otherRocky Linux 8.10, 9.5
otherAlmaLinux 8.10, 9.5, 10.1
otherDebian 12 (Bookworm), Debian 13 (Trixie)
othermacOS 14 (Sonoma), 15 (Sequoia)
feature#14695 Keys memory size histograms
feature#14714 Optimize user ACL permission verification
feature#14692 Optimize peak memory metric collection
feature#14739 Avoid allocating and releasing list node in reply copy avoidance
feature#14713 Reduce per command syscalls by reusing cached time when hardware monotonic clock is available
feature#14726 Optimize XREADGROUP CLAIM
feature#13962 Vector set: replace manual popcount with __builtin_popcountll for binary vector distance (Intel, AMD, ARM)
feature#14474 Vector set: vectorized the quantized 8-bit vector distance calculation (Intel, AMD)
feature#14492 Vector set: vectorize binary quantization path for vectorsets distance calculation (Intel, AMD)
other#14719 cluster-slot-stats-enabled - per-slot resource consumptions statistics to collect
other#14695 key-memory-histograms collect memory consumption histograms per data type
other#14695 db0_distrib_lists_sizes, db0_distrib_sets_sizes, db0_distrib_hashes_sizes, db0_distrib_zsets_sizes
fixStreams: avoid using XADD with the new IDMP or IDMPAUTO options when using appendonly yes with aof-use-rdb-preamble no (non default). This limitation will be removed in the next patch.
securityHeap buffer overflow when propagating a PUBLISH/SPUBLISH message larger than 4GB over the cluster bus in cluster mode
security#15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed
security#15722 The cluster bus protocol has no authentication of its own unless tls-cluster is enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the new…
securityTimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload
securityVector Sets: Deeply nested JSON used in Vector Set queries could cause the server to crash
security(CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write
securityOut-of-bounds access in TopK heap cleanup path (MOD-15410)
securityUse-after-free in the TLS pending-data list when a command closes another pending connection
security#15478 ACL key permission bypass in SORT, GEORADIUS/GEORADIUSBYMEMBER and XREAD/XREADGROUP: the keys validated by ACL could differ from the keys the command actually accesses
security#14847 Out-of-bounds argv access during key extraction when checking ACL permissions of a KEYNUM keyspec command (e.g. EVAL) with wrong arity
securityA malicious RDB payload with an out-of-range SLOT_INFO slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution
securityVector Sets: missing node level validation when loading a vector set from RDB may lead to out-of-bounds access
securityVector Sets: use-after-free when VREM mutates the HNSW graph while background VSIM threads are still running
securityVector Sets: a negative hnsw_search() return was treated as a huge unsigned count, reading past the end of the result arrays
security#15594 Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key
securityA crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution
securityRedisBloom/RedisBloom#1039 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution
fixRedisBloom/RedisBloom#1020 Replicate CF.LOADCHUNK data chunks to prevent silent Cuckoo Filter data loss on failover
fix#15175, RediSearch/RediSearch#9262 Redis fails to start on AArch64
fix#15163 MULTI queue memory incorrect memory accounting
fix#14581 Rare server hang at shutdown
fix#14545 ACL: AOF loading fails if ACL rules are changed and don't allow some commands in MULTI-EXEC
fix#14537 SCAN: restore original filter order (revert change introduced in 8.2)
fix#14816 setModuleEnumConfig() passing prefixed name to module callbacks
fix#14659 ACL: Key-pattern bypass in MSETEX
fix#14623 Streams: XTRIM/XADD with approx mode (~) don’t delete entries for DELREF/ACKED strategies
fix#14552 Streams: Incorrect behavior when using XDELEX ... ACKED after XGROUP DESTROY
fix#14848 Crash during command processing on replicas performing full synchronization
fix#15188 cluster-announce-ip rejecting hostnames (regression)
fix#14667, #14886 Potential TCP stalls/deadlocks
fixRediSearch/RediSearch#9484 Shard crash during background index scan of JSON documents with vector fields on Active-Active (CRDT) databases (MOD-15542)
fixRediSearch/RediSearch#9635 Severe latency spikes and shard unresponsiveness when EXPIRE or EXPIREAT operations run concurrently with queries on large indexes (MOD-14930)
security(CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution.
security(CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote Code Execution
security(CVE-2026-23631) Lua Use-After-Free may lead to remote code execution
security(CVE-2026-25588) Invalid memory access in RESTORE may lead to Remote Code Execution (Time Series)
security(CVE-2026-25589) Invalid memory access in RESTORE may lead to Remote Code Execution (Probabilistic)
fixSUBSCRIBE, PSUBSCRIBE, SSUBSCRIBE: crash on OOM (RED-167788)
fixCONFIG SET: some settings allow invalid characters (RED-167787)
fixSCRIPT DEBUG: potential crash on scripts (RED-175507)
fixVADD: crash or buffer overflow on large REDUCE value (RED-170921)
fixVSET: crash on huge allocations (MOD-12678)
fixPotential crash on disconnections and TLS failures (Time Series) (MOD-14850)
fixRediSearch/RediSearch#8744 Crash when many keys receive expirations under heavy TTL activity (MOD-14500)
fixRediSearch/RediSearch#8849 HNSW vector index memory growth under high-churn workloads until shard restart (MOD-13761)
fixRediSearch/RediSearch#8258 FT.HYBRID VSIM RANGE + FILTER incorrectly returns zero results (MOD-13885)
fixRediSearch/RediSearch#9183 FT.PROFILE HYBRID returns an empty reply (MOD-14778)
fixRediSearch/RediSearch#9048 FT.PROFILE output is inconsistent when a profiled value is missing (MOD-10560)
fixRediSearch/RediSearch#8792 FT.EXPLAIN does not lock, causing a race with concurrent index changes (MOD-14461)
fixRediSearch/RediSearch#8384 Crash when indexing negative zero (-0.0) (MOD-13904)
fixRediSearch/RediSearch#8596 FILTER returns inconsistent results with multiple indexes sharing field aliases (MOD-14063)
fixRediSearch/RediSearch#8661 FILTER behavior depends on property order in the expression (MOD-14065)
fixRediSearch/RediSearch#8598 Filter expressions are evaluated for indexes that do not match the document type (MOD-14064)
fixRediSearch/RediSearch#8597 Documents are inconsistently included or excluded depending on the indexing path taken (MOD-13948)
fixRediSearch/RediSearch#8595 RENAME notification handler loads the wrong key, causing stale index entries after a rename (MOD-14062)
fixRediSearch/RediSearch#9011 PERSIST and HPERSIST notifications are not reflected in index expiration tracking (MOD-14800)
fixRediSearch/RediSearch#9080 FT.SPELLCHECK treats PARAMS placeholders as literal terms instead of resolving them (MOD-10596)
fixRediSearch/RediSearch#8461 GC out-of-memory on replica shards leaves the replica in an inconsistent state (MOD-14066)
fixRediSearch/RediSearch#9091 Race condition in FT.HYBRID causes intermittent failures under concurrent hybrid query load (MOD-14732)
fixRediSearch/RediSearch#9161 Coordinator deadlock under mixed FT.SEARCH and FT.AGGREGATE load (MOD-14268)
fixRediSearch/RediSearch#9165 Crash on FT.SEARCH when topology validation fails (for example, some nodes unreachable) (MOD-14475)
fixRediSearch/RediSearch#8394 FT.SEARCH fails with "Query requires unavailable slots" after shard restart or failover (MOD-13828)
fixRediSearch/RediSearch#8452 FT.INFO-style output no longer reports zero-index summary data when no indices exist (MOD-14080)
fixRediSearch/RediSearch#9077 FT.CREATE now rejects schema definitions with invalid option combinations at creation time (MOD-14655)
featureRediSearch/RediSearch#8210, RediSearch/RediSearch#8231 FT.PROFILE: added queue time tracking (MOD-13602)
securityA user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply
securityRedisTimeSeries/RedisTimeSeries#1837, RedisJSON/RedisJSON#1474 Hide Personally Identifiable Information from server log
securityRedisBloom/RedisBloom#936 Cuckoo filter: crash on RDB load on 0 buckets (MOD-11593)
securityRedisBloom/RedisBloom#945 Bloom filter: crash on RDB load on large number of filters (MOD-11590)
fix#14637 Atomic slot migration: wrong adjacent slot range behavior
fix#14567 Atomic slot migration: support delay trimming slots after finishing migrating slots
fix#14746 CLUSTER SLOT-STATS: Fix few memory tracking bugs
fixRedisTimeSeries/RedisTimeSeries#1864 Atomic slot migration: time series limitations (MOD-13611)
fixRediSearch/RediSearch#6973 Correct empty string token counting in byteOffset calculations to ensure accurate text position tracking (MOD-11233)
fixRediSearch/RediSearch#6995 Prevent FT.INFO command fanout to replicas to reduce unnecessary cluster traffic
fixRediSearch/RediSearch#7154 Display Background Indexing OOM warning in FT.AGGREGATE when memory limits are approached (MOD-11817)
fixRediSearch/RediSearch#7219 Resolve concurrency issue in FT.AGGREGATEreducer that caused intermittent errors (MOD-12243)
fixRediSearch/RediSearch#7255 Correct BM25STD underflow wraparound to prevent incorrect scoring (MOD-12223)
fixRediSearch/RediSearch#7264 Ensure accurate totalDocsLen updates to maintain correct document statistics (MOD-12234)
fixRediSearch/RediSearch#7275 Report used memory as unsigned long to prevent overflow (RED-169833)
fixRediSearch/RediSearch#7350 FT.CREATE with LeanVec parameters on non-Intel architectures (RED-176382)
fixRediSearch/RediSearch#7371 Validate search-min-operation-workers min value correctly (MOD-12383)
fixRediSearch/RediSearch#7430 Prevent coordinator deadlock in FT.HYBRID queries by avoiding index read lock (MOD-12489)
fixRediSearch/RediSearch#7435 Ensure full profile output on timeout with RETURN policy in FT.PROFILE (MOD-12320)
featureRediSearch/RediSearch#7496 Vector search performance improvements (MOD-12011, MOD-12063, MOD-12629, MOD-12346)
featureRediSearch/RediSearch#7519 Reduce number of worker threads asynchronously to improve resource utilization (MOD-12252, MOD-11658)
featureRediSearch/RediSearch#7694 Use asynchronous jobs in GC for SVS to reduce blocking (MOD-12668)
featureRediSearch/RediSearch#7730 Support filter_policy and batch_size parameters for vector similarity search tuning (MOD-13007, MOD-12371)
featureRediSearch/RediSearch#7782 Resolve SVS GC failures when worker threads are disabled (MOD-12983)
featureRediSearch/RediSearch#7572 Implement ASM state machine on notifications (MOD-12170)
featureRediSearch/RediSearch#7829 ASM-aware search flow for Active-Active deployments (MOD-12171, MOD-12169)
featureRediSearch/RediSearch#7589 Support multiple slot ranges in search.CLUSTERSET for flexible cluster topology updates (MOD-11657)
featureRediSearch/RediSearch#7862 Support subquery count in FT.HYBRID (MOD-11858, MOD-13146)
featureRediSearch/RediSearch#7893 Request policy support for cursor operations (MOD-13146, MOD-9573, MOD-8104)
featureRediSearch/RediSearch#8087 Warning when cursor may give inaccurate results due to Active-Active replication (MOD-12899)
featureRediSearch/RediSearch#7445 Remove outdated validation from Debug Aggregate in cluster mode (MOD-12435)
featureRediSearch/RediSearch#7384 Reduce index load from RDB temporary memory overhead (MOD-12212)
featureRediSearch/RediSearch#7573 Debug support for FT.PROFILE command (MOD-12627)
featureRediSearch/RediSearch#7736 Add Internal cursor reads metric to cluster FT.PROFILE output (MOD-12414)
featureRediSearch/RediSearch#7552 Add active_io_threads metric (MOD-12069, MOD-12695)
featureRediSearch/RediSearch#7622 Add active_coord_threads metric (MOD-12694, MOD-12069)
featureRediSearch/RediSearch#7564 Add active_worker_threads metric (MOD-12694, MOD-12069)
featureRediSearch/RediSearch#7626 Add *_pending_jobs metrics for job queues (MOD-12069)
featureRediSearch/RediSearch#7658 Add pending workers admin jobs metric (MOD-12069, MOD-12791)
featureRediSearch/RediSearch#7731 Add active_topology_update_threads metric (MOD-12069, MOD-12790)
featureRediSearch/RediSearch#7083 Add default scorer configuration option (MOD-10037)
+44 more items in the release notesotherDIGEST, DELEX; SET extensions - atomic compare-and-set and compare-and-delete for string keys
otherMSETEX - atomically set multiple string keys and update their expiration
featureXREADGROUP - new CLAIM option for reading both idle pending and incoming stream entries
otherCLUSTER MIGRATION - atomic slot migration
otherCLUSTER SLOT-STATS - per-slot usage metrics: key count, CPU time, and network I/O
otherRedis query engine: FT.HYBRID - hybrid search and fused scoring
otherRedis query engine: I/O threading with performance boost for search and query commands (FT.*)
otherI/O threading: substantial throughput increase (e.g. >30% for caching use cases (10% SET, 90% GET), 4 cores)
otherJSON: substantial memory reduction for homogenous arrays (up to 92%)
otherAlpine and Debian Docker images - https://hub.docker.com/_/redis
otherInstall using snap - see https://github.com/redis/redis-snap
otherInstall using brew - see https://github.com/redis/homebrew-redis
otherInstall using RPM - see https://github.com/redis/redis-rpm
otherInstall using Debian APT - see https://github.com/redis/redis-debian
otherUbuntu 22.04 (Jammy Jellyfish), 24.04 (Noble Numbat)
otherRocky Linux 8.10, 9.5
otherAlmaLinux 8.10, 9.5
otherDebian 12 (Bookworm), Debian 13 (Trixie)
othermacOS 13 (Ventura), 14 (Sonoma), 15 (Sequoia)
fix#14524 XREADGROUP CLAIM returns strings instead of integers
fix#14529 Add variable key-spec flags to SET IF* and DELEX
fix#P928 Potential memory leak (MOD-11484)
fix#T1801, #T1805 macOS build failures (MOD-12293)
fix#J1438 JSON.NUMINCRBY - wrong result on integer array with non-integer increment (MOD-12282)
fix#J1437 Thread safety issue related to ASM and shared strings (MOD-12013)
feature#14480, #14516 Optimize XREADGROUP
fixWhen executing FT.SEARCH, FT.AGGREGATE, FT.CURSOR, FT.HYBRID, TS.MGET, TS.MRANGE, TS.MREVRANGE, and TS.QUERYINDEX while an atomic slot migration process is in progress, the results may be partial or contain duplicates
fixFT.PROFILE, FT.EXPLAIN, and FT.EXPLACINCLI do not contain the FT.HYBRID option
fixMetrics from FT.HYBRID command are not displayed on FT.INFO and INFO
fixFT.HYBRID: the EXPLAINSCORE, SHARD_K_RATIO, YIELD_DISTANCE_AS, and WITHCURSOR options are not supported
fixFT.HYBRID: post-filtering (after COMBINE step) using FILTER is not supported
fixFT.HYBRID: the default response format considers only key_id and score. This may change for delivering the entire document content