Skip to content

redis

v8.2.7 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Caching
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

cache database distributed-systems in-memory in-memory-database json
+11 more
key-value key-value-store messaging no-sql nosql real-time realtime redis time-series vector-databases vector-db

Affected surfaces

breaking_upgrade rce_ssrf

Summary

AI summary

Updates Bug fixes, regression, and MOD-15542 across a mixed release.

Changes in this release

Security Critical

Prevents heap-buffer-overflow in CLUSTER FORGET command

Prevents heap-buffer-overflow in CLUSTER FORGET command

Source: llm_adapter@2026-06-04

Confidence: high

 —
Bugfix High

Fixes Redis startup failure on AArch64

Fixes Redis startup failure on AArch64

Source: llm_adapter@2026-06-04

Confidence: high

 —
Bugfix High

Restores original SCAN filter order (reverts 8.2 change)

Restores original SCAN filter order (reverts 8.2 change)

Source: llm_adapter@2026-06-04

Confidence: high

 —
Bugfix High

Corrects setModuleEnumConfig() to pass prefixed name to module callbacks

Corrects setModuleEnumConfig() to pass prefixed name to module callbacks

Source: llm_adapter@2026-06-04

Confidence: high

 —
Bugfix High

Ensures XTRIM/XADD with approx mode delete entries for DELREF/ACKED strategies in Streams

Ensures XTRIM/XADD with approx mode delete entries for DELREF/ACKED strategies in Streams

Source: llm_adapter@2026-06-04

Confidence: high

 —
Bugfix High

Fixes incorrect behavior of XDELEX...ACKED after XGROUP DESTROY in Streams

Fixes incorrect behavior of XDELEX...ACKED after XGROUP DESTROY in Streams

Source: llm_adapter@2026-06-04

Confidence: high

 —
Bugfix High

Resets shutdown‑blocked client properly after cancellation

Resets shutdown‑blocked client properly after cancellation

Source: llm_adapter@2026-06-04

Confidence: high

 —
Bugfix High

Allows cluster‑announce‑ip to accept hostnames (regression fix)

Allows cluster‑announce‑ip to accept hostnames (regression fix)

Source: llm_adapter@2026-06-04

Confidence: high

 —
Bugfix High

Resolves potential TCP stalls and deadlocks

Resolves potential TCP stalls and deadlocks

Source: llm_adapter@2026-06-04

Confidence: high

 —
Bugfix High

Prevents shard crash during background index scan of JSON documents with vector fields on Active‑Active databases

Prevents shard crash during background index scan of JSON documents with vector fields on Active‑Active databases

Source: llm_adapter@2026-06-04

Confidence: high

 —
Bugfix High

Fixes severe latency spikes and shard unresponsiveness when EXPIRE or EXPIREAT run concurrently with queries on large indexes

Fixes severe latency spikes and shard unresponsiveness when EXPIRE or EXPIREAT run concurrently with queries on large indexes

Source: granite4.1:30b@2026-06-04-audit

Confidence: low

 —
Full changelog

Update urgency: HIGH: There are critical bugs that may affect a subset of users.

Bug fixes

  • #15175, RediSearch/RediSearch#9262 Redis fails to start on AArch64
  • #14537 SCAN: restore original filter order (revert change introduced in 8.2)
  • #14816 setModuleEnumConfig() passing prefixed name to module callbacks
  • #14623 Streams: XTRIM/XADD with approx mode (~) don’t delete entries for DELREF/ACKED strategies
  • #14552 Streams: Incorrect behavior when using XDELEX...ACKEDafterXGROUP DESTROY`
  • #14420 Shutdown blocked client not being properly reset after shutdown cancellation
  • #14415 Potential crash in lookupKey() when executing_client is NULL
  • #14417 CLUSTER FORGET - heap-buffer-overflow
  • #15188 cluster-announce-ip rejecting hostnames (regression)
  • #14667, #14886 Potential TCP stalls/deadlocks
  • RediSearch/RediSearch#9484 Shard crash during background index scan of JSON documents with vector fields on Active-Active (CRDT) databases (MOD-15542)
  • RediSearch/RediSearch#9635 Severe latency spikes and shard unresponsiveness when EXPIRE or EXPIREAT operations run concurrently with queries on large indexes (MOD-14930)

Security Fixes

  • #14417 `CLUSTER FORGET` - heap-buffer-overflow
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track redis

Get notified when new releases ship.

Sign up free

About redis

For developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.

All releases →

Related context

Beta — feedback welcome: [email protected]