Redis 8.6.7 → 8.8.2
3 releases · 0 breaking changes · 11 security fixes · 0 advisories fixed
11security0breaking0deprecated6feature4fix
Breaking changes
None in the release notes.
Security changes
- security (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write in 8.8.2
- security Out-of-bounds access in TopK heap cleanup path (MOD-15410) in 8.8.2
- security Use-after-free in the TLS pending-data list when a command closes another pending connection in 8.8.2
- security #15478 ACL key permission bypass in SORT, GEORADIUS/GEORADIUSBYMEMBER and XREAD/XREADGROUP: the keys validated by ACL could differ from the keys the command actually accesses in 8.8.2
- security A malicious RDB payload with an out-of-range SLOT_INFO slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution in 8.8.2
- security Vector Sets: missing node level validation when loading a vector set from RDB may lead to out-of-bounds access in 8.8.2
- security Vector Sets: use-after-free when VREM mutates the HNSW graph while background VSIM threads are still running in 8.8.2
- security Vector Sets: a negative hnsw_search() return was treated as a huge unsigned count, reading past the end of the result arrays in 8.8.2
- security TLS client certificate authentication bypass: a Common Name containing an embedded NUL byte was truncated, allowing a client to authenticate as another (possibly privileged) ACL user in 8.8.2
- security #15594 Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key in 8.8.2
- security RedisBloom/RedisBloom#1044 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution in 8.8.1
Every release in between
security(CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write
securityOut-of-bounds access in TopK heap cleanup path (MOD-15410)
securityUse-after-free in the TLS pending-data list when a command closes another pending connection
security#15478 ACL key permission bypass in SORT, GEORADIUS/GEORADIUSBYMEMBER and XREAD/XREADGROUP: the keys validated by ACL could differ from the keys the command actually accesses
securityA malicious RDB payload with an out-of-range SLOT_INFO slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution
securityVector Sets: missing node level validation when loading a vector set from RDB may lead to out-of-bounds access
securityVector Sets: use-after-free when VREM mutates the HNSW graph while background VSIM threads are still running
securityVector Sets: a negative hnsw_search() return was treated as a huge unsigned count, reading past the end of the result arrays
securityTLS client certificate authentication bypass: a Common Name containing an embedded NUL byte was truncated, allowing a client to authenticate as another (possibly privileged) ACL user
security#15594 Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key
securityRedisBloom/RedisBloom#1044 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution
featureNew data structure: Array (@antirez)
otherSubkey notification for hash fields - field-level notifications
otherINCREX: a window counter rate limiter combining INCR, INCRBY, INCRBYFLOAT, bounds, and expiration (@raffertyyu + Redis team)
featureXNACK: a new streams command - allow consumers to explicitly release pending messages
featureZUNION, ZINTER, ZUNIONSTORE, ZINTERSTORE: new COUNT aggregator
featureJSON.SET: new FPHA argument to specify the FP type for homogeneous FP arrays
otherTS.RANGE, TS.REVRANGE, TS.MRANGE, TS.MREVRANGE: multiple aggregators in a single command
featureFT.HYBRID KNN clause: new argument to request fewer candidates per shard
featureFT.PROFILE HYBRID: profiling support for FT.HYBRID
otherPerformance improvements
otherAlpine and Debian Docker images - https://hub.docker.com/_/redis
otherInstall using snap - see https://github.com/redis/redis-snap
otherInstall using brew - see https://github.com/redis/homebrew-redis
otherInstall using RPM - see https://github.com/redis/redis-rpm
otherInstall using Debian APT - see https://github.com/redis/redis-debian
otherUbuntu 22.04 (Jammy Jellyfish), 24.04 (Noble Numbat), 26.04 (Resolute Raccoon)
otherRocky Linux 8.10, 9.7, 10.1
otherAlmaLinux 8.10, 9.7, 10.1
otherDebian 12.13 (Bookworm), Debian 13.4 (Trixie)
otherAlpine 3.23
othermacOS 14.8.4 (Sonoma), 15.7.4 (Sequoia), 26.3 (Tahoe) - for both Intel and ARM
fix#15237 INCREX syntax update
fix#15005 Memory tracking can be enabled at runtime in non-clustered mode
fixRedisTimeSeries/RedisTimeSeries#1930 Cluster topology changes during a multi-shard command are not handled (MOD-14439)
fixRedisBloom/RedisBloom#1007 Memory leak on RDB load (MOD-15418)