What redis/redis shipped
Generated by FoxPlug from public activity — not affiliated with Redis.
Week of September 14, 2026
What shipped
- Redis 8.10.2 released with security fixes for ACL key permission checks in transactions and cluster bus authentication. Release
- Redis 8.8.3 released with the same security fixes for ACL and cluster bus issues. Release
- Redis 8.6.7 released with security fixes for ACL key permissions and cluster bus authentication. Release
- Redis 8.4.7 released addressing ACL and cluster bus security concerns. Release
- Redis 8.2.10 released with a security fix requiring explicit configuration to use unauthenticated cluster bus ports. Release
- Added BLESS command to protect keys from eviction, with protection surviving restarts and replication. Pull request #15649
- redis-cli now uses CLIENT NO-TOUCH for --bigkeys, --memkeys, and --keystats to prevent affecting LRU/LFU eviction policy metrics. Pull request #15817
- AOF replay-time estimate now exposed in INFO persistence to help operators gauge reload RTO. Release
- Fixed ASM tests to work with --single flag by ensuring proper slot setup across nodes. Pull request #15636
- Fixed race condition in AOF duration test module where arguments were released before slowlog recording completed. Pull request #15805
Why it matters
This week focused on security patches across multiple release branches addressing critical ACL and cluster authentication issues, along with operational improvements for eviction protection and AOF visibility. Several test reliability fixes and module version updates ensure better stability and observability for production deployments.
Changelog entry
- Security: Fix ACL key permissions not being rechecked at EXEC time (#15673) Pull request #15804
- Security: Make unauthenticated cluster bus port an explicit choice (#15722) Pull request #15804
- Feature: Add BLESS command to protect keys from eviction (#15649) Pull request #15649
- Feature: Expose AOF command duration estimate in INFO persistence (#15665, #15817) Release
- Enhancement: redis-cli uses CLIENT NO-TOUCH for --bigkeys, --memkeys, --keystats (#15817) Pull request #15817
- Fix: ASM tests now work with --single flag (#15636) Pull request #15636
- Fix: Race condition in AOF duration test module argument release (#15805) Pull request #15805
- Fix: AOF duration test tolerance for macOS sleep delay (#15814) Pull request #15814
- Cleanup: Remove unused EB_BUCKET_KEY_PRECISION machinery from ebuckets (#15725) Pull request #15725
- Test: Add regression test for loading cluster config without shard IDs (#15757) Pull request #15757
Redis 8.10.2, 8.8.3, 8.6.7, 8.4.7, and 8.2.10 released with security fixes for ACL key permissions in transactions and cluster bus authentication. BLESS command added to protect keys from eviction.
This week's Redis releases (8.10.2, 8.8.3, 8.6.7, 8.4.7, 8.2.10) address critical security issues with ACL key permission rechecking in transactions and cluster bus authentication. Additionally, the new BLESS command lets operators protect specific keys from eviction, surviving restarts and replication. redis-cli improvements prevent scan operations from affecting eviction metrics, and AOF replay-time estimates now appear in INFO for RTO visibility.