Redis: Security Patches Ship Across Five Release Lines
Redis backported two security fixes — an ACL permission bypass in transactions and an unauthenticated cluster bus port — across five simultaneous point releases, while separate work targeted IO thread performance and a module client cleanup bug.
Duration: PT2M30S
Episode overview
This episode is a short developer briefing from Redis.
It explains recent repository work in plain language.
- Show: Redis
- Published: 2026-09-18T13:14:54Z
- Audio duration: PT2M30S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good day. It's September 18th, 2026, and this is your Redis briefing.
The top story today is a coordinated security patch rollout. Sundb merged five release pull requests within a 20-minute window — versions 8.10.2, 8.8.3, 8.6.7, 8.4.7, and 8.2.10 — all carrying the same two fixes. The first, from issue 15673, closes a gap where commands queued inside a transaction could still touch…
Second theme: performance work on the hot path for high-throughput setups. PR 15819 from abokhalill found that prefetched keys were being hashed twice — once during prefetch, once during lookup — costing real CPU cycles under load, measured at over 3% of instructions with prefetching enabled. The fix carries the…
Elsewhere, PR 15818 fixes a module authentication cleanup bug where a client disconnecting mid-auth could leak private data and block the module from unloading. And on tooling, PR 15817 adds CLIENT NO-TOUCH to redis-cli's big-keys and key-stats commands so key analysis doesn't skew LRU or LFU eviction stats. A CI…
What's next: expect these backports to reach general availability soon, so plan upgrade windows accordingly, especially for cluster deployments running without TLS.
That's the briefing…
Nearby episodes from Redis
- Data Correctness Fixes Across Streams, Sorted Sets, and Scripting
- Security Patches Roll Backward Across Four Release Lines
- Trust Boundaries Get Tighter
- Checksum Performance and a Version Bump Cluster
- Weekly Recap - Correctness Fixes and Read-Path Performance
- Hardening Under Concurrency
- Hardening Persistence and Trimming Clock Overhead
- Shaving Branch Misses Out of SipHash