Redis changelog

Update urgency: SECURITY: There are security fixes in the release. Security fixes (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write Out-of-bounds access in TopK heap cleanup path (MOD-15410) Use-a

Update urgency: SECURITY: There are security fixes in the release. Security fixes (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write Out-of-bounds access in TopK heap cleanup path (MOD-15410) Use-a

Update urgency: SECURITY: There are security fixes in the release. Security fixes (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write Out-of-bounds access in TopK heap cleanup path (MOD-15410) Use-a

Update urgency: SECURITY: There are security fixes in the release. Security fixes (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write Out-of-bounds access in TopK heap cleanup path (MOD-15410) Use-a

Security fixes (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write Out-of-bounds access in TopK heap cleanup path (MOD-15410) Use-after-free in the TLS pending-data list when a command closes anothe

This is the General Availability release of Redis 8.10 in Redis Open Source. Major changes compared to 8.8 Compact hashes - a new hash encoding that reduces memory usage by storing hash field names just once for keys that share a schema New

SECURITY: There is a security fix in the release. Security fixes RedisBloom/RedisBloom#1044 Crafted RESTORE payloads in RedisBloom and TDigest may trigger out-of-bounds writes, potentially leading to remote code execution

SECURITY: There are security fixes in the release. Security fixes A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution RedisBloom/RedisBloom#1046 C

SECURITY: There are security fixes in the release. Security fixes A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution RedisBloom/RedisBloom#1039 C

SECURITY: There are security fixes in the release. Security fixes A crafted stream RESTORE payload can make two consumers share the same NACK, leading to a use-after-free that may result in Remote Code Execution RedisBloom/RedisBloom#1041 C

Update urgency: HIGH: There are critical bugs that may affect a subset of users. Bug fixes #15175, RediSearch/RediSearch#9262 Redis fails to start on AArch64 #15163 MULTI queue memory incorrect memory accounting #15115 Under-copy in the Lua

Update urgency: HIGH: There are critical bugs that may affect a subset of users. Bug fixes #15175, RediSearch/RediSearch#9262 Redis fails to start on AArch64 #15163 MULTI queue memory incorrect memory accounting #14581 Rare server hang at s

Update urgency: HIGH: There are critical bugs that may affect a subset of users. Bug fixes #15175, RediSearch/RediSearch#9262 Redis fails to start on AArch64 #14537 SCAN: restore original filter order (revert change introduced in 8.2) #1481

This is the General Availability release of Redis 8.8 in Redis Open Source. Major changes compared to 8.6 New data structure: Array (@antirez) Subkey notification for hash fields - field-level notifications INCREX: a window counter rate lim

Update urgency: SECURITY: There are security fixes in the release. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution (CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote

Update urgency: SECURITY: There are security fixes in the release. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution. (CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote

Update urgency: SECURITY: There are security fixes in the release. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution. (CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote

Bug fixes #14824 Potential UAF: don't use reply copy avoidance for module strings #14848 Crash during command processing on replicas performing full synchronization #14794 New XIDMPRECORD internal command and AOFRW emission to restore strea

SECURITY: There is a security fix in the release Security fixes A user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply Bug fixes #14785 HOTKEYS: The INFO command may display module information,

SECURITY: There is a security fix in the release Security fixes A user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply

SECURITY: There is a security fix in the release Security fixes A user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply

SECURITY: There is a security fix in the release Security fixes A user can manipulate data read by a connection by injecting \r\n sequences into a Redis error reply

This is the General Availability release of Redis 8.6 in Redis Open Source. Major changes compared to 8.4 Substantial performance improvements Substantial memory reduction for hashes (hashtable-encoded) and sorted sets (skiplist-encoded) St

Update urgency: SECURITY: There are security fixes in the release. Security fixes RedisTimeSeries/RedisTimeSeries#1837, RedisJSON/RedisJSON#1474 Hide Personally Identifiable Information from server log RedisBloom/RedisBloom#936 Cuckoo filte

Update urgency: SECURITY: There are security fixes in the release. Security fixes RedisTimeSeries/RedisTimeSeries#1837, RedisJSON/RedisJSON#1474 Hide Personally Identifiable Information from server log Bug fixes RedisJSON/RedisJSON#1430 Mal

This is the General Availability release of Redis 8.4 in Redis Open Source. Major changes compared to 8.2 DIGEST, DELEX; SET extensions - atomic compare-and-set and compare-and-delete for string keys MSETEX - atomically set multiple string

Update urgency: SECURITY: There is a security fix in the release. Security fixes (CVE-2025-62507) XACKDEL - potential stack overflow and RCE Bug fixes HGETEX - potential crash when FIELDS is used and numfields is missing Potential crash on

Update urgency: HIGH: There are critical bugs that may affect a subset of users. Bug fixes HGETEX - potential crash when FIELDS is used and numfields is missing Potential crash on HyperLogLog with 2GB+ entries Cuckoo filter - Division by ze

Update urgency: SECURITY: There are security fixes in the release Security fixes (CVE-2025-49844) A Lua script may lead to remote code execution (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE (CVE-2025-46818) A

Update urgency: SECURITY: There are security fixes in the release. Security fixes (CVE-2025-49844) A Lua script may lead to remote code execution (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE (CVE-2025-46818)

Update urgency: MODERATE: Program an upgrade of the server, but it's not urgent. Bug fixes #14240 INFO KEYSIZES - potential incorrect histogram updates on cluster mode with modules #14274 Disable Active Defrag during flushing replica #14276

This is the General Availability release of Redis 8.2 in Redis Open Source. Major changes compared to 8.0 Streams - new commands: XDELEX and XACKDEL; extension to XADD and XTRIM Bitmap - BITOP: new operators: DIFF, DIFF1, ANDOR, and ONE Que

Update urgency: SECURITY: There are security fixes in the release. Security fixes (CVE-2025-32023) Fix out-of-bounds write in HyperLogLog commands (CVE-2025-48367) Retry accepting other connections even if the accepted connection reports an

Update urgency: SECURITY: There are security fixes in the release. Security fixes (CVE-2025-27151) redis-check-aof may lead to stack overflow and potential RCE Bug fixes #14081 Cron-based timers run twice as fast when active defrag is enabl

Update urgency: MODERATE: Program an upgrade of the server, but it's not urgent. Performance and resource utilization improvements #13959 Vector sets - faster VSIM FILTER parsing Bug fixes #Q6083 Query Engine - revert default policy search-

This is the General Availability release of Redis 8.0 in Redis Open Source. Redis 8.0 deprecates previous Redis and Redis Stack versions. Stand alone RediSearch, RedisJSON, RedisTimeSeries, and RedisBloom are no longer needed as they are no