megachangelog
Fix8.6.4

Redis 8.6.4 — Critical Bug Fixes

This release addresses critical bugs affecting stability, data consistency, and security, including startup failures on AArch64, memory accounting issues, cluster crashes, and potential use-after-free vulnerabilities. Immediate update is recommended for users running affected configurations.

Update urgency: HIGH: There are critical bugs that may affect a subset of users.

Bug fixes

  • #15175, RediSearch/RediSearch#9262 Redis fails to start on AArch64
  • #15163 MULTI queue memory incorrect memory accounting
  • #15115 Under-copy in the Lua debugger
  • #15094 Cluster crash when CLIENT KILL unsubscribes SSUBSCRIBE client inside EXEC
  • #14963 XREADGROUP: consumer replication inconsistency
  • #14934 Client output buffer memory tracking not accounting for copy-avoided bulk string references
  • #14970 Sentinel config injection via SENTINEL SET
  • #14982 SCAN commands: integer overflow in COUNT parameter
  • #15073 CLIENT TRACKING: self-overlap returning non-zero loop index
  • #15059 Use-after-free
  • #15037 XINFO STREAM: wrong value in the per-slot memory tracking
  • #15034, #15081 Issues processing corrupt RDB data
  • #15021 HEXPIRE: overflow on fields count
  • #14942 Fix COMMAND GETKEYS for PFMERGE with no source keys
  • #15188 cluster-announce-ip rejecting hostnames (regression)
  • #14667, #14886 Potential TCP stalls/deadlocks
  • RediSearch/RediSearch#9484 Shard crash during background index scan of JSON documents with vector fields on Active-Active (CRDT) databases (MOD-15542)
  • RediSearch/RediSearch#9635 Severe latency spikes and shard unresponsiveness when EXPIRE or EXPIREAT operations run concurrently with queries on large indexes (MOD-14930)
stabilitymemorysecurityclusterbugs

Source: original entry ↗

More from Redis

Follow Redis to get its new changes in your feed and email digest.

Improvement8.12-m02-int

Improve test timeout diagnostics with crash reports and stack traces

When a test times out, the system now collects crash reports from Redis servers and stack traces from clients before terminating, providing better diagnostics for hung tests instead of silently killing them.

testingdiagnosticstimeoutdebugging
Security8.10.2

Security fixes in Redis 8.10.2

This release addresses critical security vulnerabilities including ACL permission bypasses in transactions, unauthenticated cluster bus access, and server crashes in TimeSeries, RedisSearch, and Vector Sets. The new cluster-bus-port-protected-mode option allows nodes to require TLS authentication for cluster bus communication.

securityaclclustertimeseriessearch
Security8.8.3

Redis 8.8.3 Security and Stability Release

This release includes critical security fixes for transaction ACL bypasses, cluster bus authentication warnings, and crash prevention in TimeSeries and Vector Sets. A new cluster-bus-port-protected-mode option allows nodes to enforce authentication on the cluster bus port.

securityaclclusterstabilitytimeseries
See all Redis changes →