Redis

Redis integrates redis-roaring for compressed bitmaps with lower memory use and faster operations, adds SEXPIRE/STTL-family commands to expire individual set members, and introduces BLESS to exempt specified keys from eviction. The release also hardens RediSearch indexed-value hashing against HashDoS-style degradation and fixes an out-of-bounds read on incomplete UTF-8 in indexed TEXT fields, alongside dozens of bug fixes across streams, replication, clustering, and the search modules.

Fixes a heap buffer overflow when propagating a PUBLISH or SPUBLISH message larger than 4GB over the cluster bus in cluster mode. The release is marked as a security fix requiring urgent upgrade.

Beta introduces an experimental multi-database client (createMultiDbClient, createMultiDbClientPool, createMultiDbCluster, createMultiDbSentinel) that fails over to a healthy endpoint using health checks and a circuit breaker, plus OPTIN/OPTOUT client-side caching modes, the BLESS command family, and new FT.SEARCH options. Also lands a large batch of connection, cluster, sentinel, pub/sub, RESP type-mapping, and command-argument fixes.

Adds an experimental FullDuplex mode for auto-pipelining where a writer and reader goroutine stream commands over one held connection, reaching roughly 1 RTT per command on high-latency links. The minimum Go version moves to 1.26, pipelines get their own per-client connection pool, and AutoPipelineOptions.MaxBatchBytes gains a 128 KiB default.

Bug fixes address DMC proxy stability, alongside internal fixes and improvements.

Fixes upgrades from Redis Software 7.2.x and 7.4.x failing due to a lost replication link to the cluster configuration store, plus cluster management issues after primary node changes, node removal during upgrades, and resharding. Also addresses DMC proxy crashes, Active-Active full-sync recovery, ACL pubsub validation, and sign-in for passwords containing a colon.

Fixed authentication failures for ACL-only databases after just-in-time user provisioning and a cluster going unresponsive when a newly joined node became primary during scaling. Also resolved DMC proxy memory corruption and crashes, GCS backups missing the private_key field, and periodic latency spikes from scheduled tasks firing simultaneously.

Fixed a DMC proxy crash on commands without key arguments in a pipeline, and a proxy crash triggered by dmc-cli list bdb and list server.

An experimental full-duplex mode for the automatic pipeliner holds one pipeline-pool connection with concurrent writer and reader goroutines, cutting per-command latency to roughly one RTT on high-latency links. Each client now creates a dedicated pipeline connection pool used by Pipeline, TxPipeline, and autopipeline operations, with PipelinePoolSize: -1 restoring the previous single-pool behavior.

Redis Software now supports FIPS 140-3 for RHEL 9 containerized Redis on AWS EKS with Bottlerocket FIPS worker nodes, using cryptographic libraries based on FIPS 140-3 validated modules. Fixed LDAP client authentication, minor version upgrades and shard placement, custom internode encryption certificates, database resizing with Auto Tiering enabled, and metrics export and Prometheus ingestion.

Restored the color-coded Active-Active database synchronization status indicators on the Cluster Manager overview page. Fixed basic authentication when changing a user password through the REST API, database connectivity after a quorum node failure, and partial upgrades.

Redis Software 7.22.2-189 adds scoping for shards and database endpoints, alongside internal fixes and improvements.

Redis Cloud's September release brings Redis Search on Flex in beta, support for multiple sources in Data Integration pipelines, and Redis Radar.

Fixed a memory leak in the Active-Active database syncer. Added scoping for shards and database endpoints, plus internal fixes and improvements.

Security release fixes a heap out-of-bounds write in CMSketch RDB loading (CVE-2026-62356), a malicious RDB payload causing memory corruption that could lead to remote code execution, and a TLS client certificate authentication bypass via embedded NUL bytes in Common Names. Also patched use-after-free and out-of-bounds issues across TopK, TLS pending-data list, Vector Sets, and the blocked-client list.