- Fixed use‑after‑free vulnerability in RESTORE for stream consumer groups, preventing potential remote code execution
- Patched crafted RESTORE payload issue in RedisBloom/TDigest that could cause out‑of‑bounds writes and remote code execution
- Ensured CF.LOADCHUNK data chunks are replicated to avoid silent Cuckoo Filter data loss on failover
8.2.8
Official Redis changelog summary with source attribution, release tags, and community reactions.
Track this Redis release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Redis release note into a weekly digest for the tools you actually use.
Create digestMore Redis changelog updates
- Fixed a security vulnerability in RedisBloom and TDigest where crafted RESTORE payloads could cause out-of-bounds writes.
Security fixes patch crafted RESTORE payloads that could cause use‑after‑free and out‑of‑bounds writes in RedisBloom/TDigest, preventing potential remote code execution.
Fixed use‑after‑free and out‑of‑bounds write vulnerabilities in RESTORE handling for stream consumer groups, RedisBloom, and TDigest, preventing remote code execution.