- Fixed multiple memory corruption vulnerabilities including OOB writes, use‑after‑free, and out‑of‑bounds reads in RDB loading, CMSketch, TopK cleanup, TLS pending data, ACL checks, and vector set handling.
- Patched ACL bypasses affecting SORT, GEORADIUS*, and XREAD* commands and corrected argv access for KEYNUM spec commands.
- Resolved use‑after‑free issues in blocked client list and TLS pending data list, preventing potential remote code execution.
8.2.9
Official Redis changelog summary with source attribution, release tags, and community reactions.
Track this Redis release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Redis release note into a weekly digest for the tools you actually use.
Create digestMore Redis changelog updates
Fixed multiple critical security vulnerabilities including CVE‑2026‑62356, heap out‑of‑bounds write, use‑after‑free, and TLS client certificate authentication bypass.
Fixed several critical CVE‑2026‑62356 vulnerabilities: buffer overflow, out‑of‑bounds access, use‑after‑free, and ACL bypass in commands like SORT, GEORADIUS, and XREADGROUP.
Fixed multiple heap OOB write and use‑after‑free vulnerabilities in CMSketch loading, TopK cleanup, and TLS pending data handling.