✓ No known CVEs patched in this version
Topics
+11 more
Affected surfaces
Summary
AI summaryUpdates Bug fixes, regression, and MOD-15542 across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Critical |
Fixes ACL key‑pattern bypass vulnerability in `MSETEX`. Fixes ACL key‑pattern bypass vulnerability in `MSETEX`. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Performance | High |
Eliminates severe latency spikes and shard unresponsiveness when `EXPIRE`/`EXPIREAT` run concurrently with queries on large indexes. Eliminates severe latency spikes and shard unresponsiveness when `EXPIRE`/`EXPIREAT` run concurrently with queries on large indexes. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | High |
Fixes Redis startup failure on AArch64 architecture. Fixes Redis startup failure on AArch64 architecture. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | High |
Corrects inaccurate memory accounting for `MULTI` command queues. Corrects inaccurate memory accounting for `MULTI` command queues. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | High |
Prevents rare server hang during shutdown. Prevents rare server hang during shutdown. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | High |
Resolves AOF loading failure when ACL rules disallow commands in `MULTI`‑`EXEC`. Resolves AOF loading failure when ACL rules disallow commands in `MULTI`‑`EXEC`. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | High |
Restores original filter order for `SCAN` command (reverts 8.2 change). Restores original filter order for `SCAN` command (reverts 8.2 change). Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | High |
Corrects `setModuleEnumConfig()` to pass un‑prefixed names to module callbacks. Corrects `setModuleEnumConfig()` to pass un‑prefixed names to module callbacks. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | High |
Ensures `XTRIM`/`XADD` with approx mode delete entries for `DELREF`/`ACKED` strategies. Ensures `XTRIM`/`XADD` with approx mode delete entries for `DELREF`/`ACKED` strategies. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | High |
Corrects behavior of `XDELEX...ACKED` after `XGROUP DESTROY`. Corrects behavior of `XDELEX...ACKED` after `XGROUP DESTROY`. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | High |
Prevents crash during command processing on replicas performing full synchronization. Prevents crash during command processing on replicas performing full synchronization. Source: llm_adapter@2026-06-04 Confidence: high |
— |
| Bugfix | High |
Addresses potential TCP stalls and deadlocks. Addresses potential TCP stalls and deadlocks. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | High |
Prevents shard crash during background index scan of JSON documents with vector fields on Active‑Active (CRDT) databases. Prevents shard crash during background index scan of JSON documents with vector fields on Active‑Active (CRDT) databases. Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes `cluster-announce-ip` rejecting hostnames (regression). Fixes `cluster-announce-ip` rejecting hostnames (regression). Source: granite4.1:30b@2026-06-04-audit Confidence: low |
— |
Full changelog
Update urgency: HIGH: There are critical bugs that may affect a subset of users.
Bug fixes
- #15175, RediSearch/RediSearch#9262 Redis fails to start on AArch64
- #15163
MULTIqueue memory incorrect memory accounting - #14581 Rare server hang at shutdown
- #14545 ACL: AOF loading fails if ACL rules are changed and don't allow some commands in
MULTI-EXEC - #14537
SCAN: restore original filter order (revert change introduced in 8.2) - #14816 setModuleEnumConfig() passing prefixed name to module callbacks
- #14659 ACL: Key-pattern bypass in
MSETEX - #14623 Streams:
XTRIM/XADDwith approx mode (~) don’t delete entries forDELREF/ACKEDstrategies - #14552 Streams: Incorrect behavior when using
XDELEX...ACKEDafterXGROUP DESTROY` - #14848 Crash during command processing on replicas performing full synchronization
- #15188
cluster-announce-iprejecting hostnames (regression) - #14667, #14886 Potential TCP stalls/deadlocks
- RediSearch/RediSearch#9484 Shard crash during background index scan of JSON documents with vector fields on Active-Active (CRDT) databases (MOD-15542)
- RediSearch/RediSearch#9635 Severe latency spikes and shard unresponsiveness when
EXPIREorEXPIREAToperations run concurrently with queries on large indexes (MOD-14930)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About redis
For developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.
Related context
Related tools
Beta — feedback welcome: [email protected]