Redis 8.4.4 — Critical Bug Fixes
This release addresses multiple critical bugs affecting startup, memory accounting, ACL loading, replication, and RediSearch indexes. Updates are recommended for users experiencing server hangs, crashes during synchronization, or ACL/stream operation issues.
Update urgency: HIGH: There are critical bugs that may affect a subset of users.
Bug fixes
- #15175, RediSearch/RediSearch#9262 Redis fails to start on AArch64
- #15163
MULTIqueue memory incorrect memory accounting - #14581 Rare server hang at shutdown
- #14545 ACL: AOF loading fails if ACL rules are changed and don't allow some commands in
MULTI-EXEC - #14537
SCAN: restore original filter order (revert change introduced in 8.2) - #14816 setModuleEnumConfig() passing prefixed name to module callbacks
- #14659 ACL: Key-pattern bypass in
MSETEX - #14623 Streams:
XTRIM/XADDwith approx mode (~) don’t delete entries forDELREF/ACKEDstrategies - #14552 Streams: Incorrect behavior when using
XDELEX...ACKEDafterXGROUP DESTROY` - #14848 Crash during command processing on replicas performing full synchronization
- #15188
cluster-announce-iprejecting hostnames (regression) - #14667, #14886 Potential TCP stalls/deadlocks
- RediSearch/RediSearch#9484 Shard crash during background index scan of JSON documents with vector fields on Active-Active (CRDT) databases (MOD-15542)
- RediSearch/RediSearch#9635 Severe latency spikes and shard unresponsiveness when
EXPIREorEXPIREAToperations run concurrently with queries on large indexes (MOD-14930)
Source: original entry ↗
More from Redis
Follow Redis to get its new changes in your feed and email digest.
Improve test timeout diagnostics with crash reports and stack traces
When a test times out, the system now collects crash reports from Redis servers and stack traces from clients before terminating, providing better diagnostics for hung tests instead of silently killing them.
Security fixes in Redis 8.10.2
This release addresses critical security vulnerabilities including ACL permission bypasses in transactions, unauthenticated cluster bus access, and server crashes in TimeSeries, RedisSearch, and Vector Sets. The new cluster-bus-port-protected-mode option allows nodes to require TLS authentication for cluster bus communication.
Redis 8.8.3 Security and Stability Release
This release includes critical security fixes for transaction ACL bypasses, cluster bus authentication warnings, and crash prevention in TimeSeries and Vector Sets. A new cluster-bus-port-protected-mode option allows nodes to enforce authentication on the cluster bus port.