Redis 8.10.1 for Windows

Update urgency: SECURITY: There are security fixes in the release.

Security fixes

• (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write
• Out-of-bounds access in TopK heap cleanup path (MOD-15410)
• Use-after-free in the TLS pending-data list when a command closes another pending connection
• A malicious RDB payload with an out-of-range SLOT_INFO slot id causes memory corruption during RDB loading, which may lead to Remote Code Execution
• Vector Sets: missing node level validation when loading a vector set from RDB may lead to out-of-bounds access
• Vector Sets: use-after-free when VREM mutates the HNSW graph while background VSIM threads are still running
• Vector Sets: a negative hnsw_search() return was treated as a huge unsigned count, reading past the end of the result arrays
• TLS client certificate authentication bypass: a Common Name containing an embedded NUL byte was truncated, allowing a client to authenticate as another (possibly privileged) ACL user
• redis/redis#15594 Use-after-free in the blocked-client list when reprocessing a command evicts another client blocked on the same key

Hashes

MSYS2 Builds Hashes

Algorithm : SHA256
Hash : CF5F601E6B784D4DDFEF367A318B551FD397B8E206052847945750DF6F67B171
Path : D:\a\redis-windows-fork\redis-windows-fork\Redis-8.10.1-Windows-x64-msys2.zip

Included license files under LICENCES/: redis, msys2-runtime, libopenssl, gcc-libs
From workflow: https://github.com/taizod1024/redis-windows-fork/actions/runs/32618758770

Redis 8.10.0 for Windows

This is the General Availability release of Redis 8.10 in Redis Open Source.

Major changes compared to 8.8

• Compact hashes - a new hash encoding that reduces memory usage by storing hash field names just once for keys that share a schema
• New command: HIMPORT - high-throughput compact hash bulk insertion
• TLS peer certificate-based server-to-server authentication
• New commands: LMOVEM, BLMOVEM - move multiple elements between lists
• New command: SUNIONCARD - get the cardinality of the union of multiple sets
• New command: SDIFFCARD - get the cardinality of the difference between sets
• New command: BACKUP - node-side implementation for backup and restore based on multi-part AOF (MP-AOF)
• XREAD, XREADGROUP - new MAXCOUNT and MAXSIZE arguments to cap the cumulative reply entries and size
• New command: FT.ALIASLIST - get all aliases for the index
• Stemmer support for Malay and Tagalog languages
• JSONPath extensions
• New commands: TS.NRANGE, TS.NREVRANGE - Query a range across multiple time series; group results by timestamp
• New command: TS.READ - optionally blocking read
• New command: TS.QUERYLABELS - Get a list of labels and label-values
• New command: TS.MRANGE, TS.MREVRANGE - new EXCLUDEEMPTY argument to exclude series with no reported samples
• Performance improvements

Binary distributions

• Alpine and Debian Docker images - https://hub.docker.com/_/redis
• Install using snap - see https://github.com/redis/redis-snap
• Install using brew - see https://github.com/redis/homebrew-redis
• Install using RPM - see https://github.com/redis/redis-rpm
• Install using Debian APT - see https://github.com/redis/redis-debian

Operating systems we test Redis 8.10 on

• Ubuntu 22.04 (Jammy Jellyfish), 24.04 (Noble Numbat), 26.04 (Resolute Raccoon)
• Rocky Linux 8.10, 9.7, 10.1
• AlmaLinux 8.10, 9.7, 10.1
• Debian 12.13 (Bookworm), Debian 13.4 (Trixie)
• Alpine 3.23
• macOS 14.8.4 (Sonoma), 15.7.4 (Sequoia), 26.3 (Tahoe) - for both Intel and ARM

Bug fixes (compared to 8.10-RC2)

• redis/redis#15513 Prevented a division-by-zero error when active defragmentation thresholds are configured with equal or reversed value
• redis/redis#15453 Clients blocked on BLPOP, BLMOVE, or BLMOVEM could remain blocked after SORT with STORE replaced the target key with a list
• redis/redis#15499 Memory usage reported for compressed replication clients could be lower than the actual memory consumed
• redis/redis#15518 notify modules when node's own ip/port changes
• redis/redis#15539 Loading an AOF file with an RDB preamble could fail when active defragmentation was enabled
• RediSearch/RediSearchhttps://github.com/redis/redis/pull/10528 Crash in the numeric range tree when background garbage collection encounters an empty leaf during active indexing on a numeric field. (MOD-16877)
• RediSearch/RediSearchhttps://github.com/redis/redis/pull/10605 FT.CREATE and FT.ALTER now reject an empty string as a field name, preventing a crash loop in the fork-GC on indexes with an empty TAG field. (MOD-17034)
• RediSearch/RediSearchhttps://github.com/redis/redis/pull/10488 FT.INFO reports a negative num_records after garbage collection on indexes that include an INDEXMISSING field. (MOD-16940)
• RediSearch/RediSearchhttps://github.com/redis/redis/pull/10568 Cluster FT.AGGREGATE fails with SEARCH_FIELD_DUP when a GROUPBY contains multiple REDUCE COLLECT calls over the same field differing only in option-keyword casing. (MOD-16365)
• RediSearch/RediSearchhttps://github.com/redis/redis/pull/10605 FT.CREATE and FT.ALTER now return an error when a field name is an empty string; previously such schemas were accepted silently. (MOD-17034)
• RediSearch/RediSearchhttps://github.com/redis/redis/pull/10522 coord_total_query_warnings_timeout double-counts timeout warnings for FT.SEARCH queries that use a hybrid (vector + filter) execution path. (MOD-15973)

Hashes

MSYS2 Builds Hashes

Algorithm : SHA256
Hash : 09F077EB33AF79B9A8A3190C24BD0F0E7F2B5411A9B15CEEE7480BAFD359D5E1
Path : D:\a\redis-windows-fork\redis-windows-fork\Redis-8.10.0-Windows-x64-msys2.zip

Included license files under LICENCES/: redis, msys2-runtime, libopenssl, gcc-libs
From workflow: https://github.com/taizod1024/redis-windows-fork/actions/runs/30503867904

Redis 8.8.0 for Windows

This is the General Availability release of Redis 8.8 in Redis Open Source.

Major changes compared to 8.6

• New data structure: Array (@antirez)
• Subkey notification for hash fields - field-level notifications
• INCREX: a window counter rate limiter combining INCR, INCRBY, INCRBYFLOAT, bounds, and expiration (@raffertyyu + Redis team)
• XNACK: a new streams command - allow consumers to explicitly release pending messages
• ZUNION, ZINTER, ZUNIONSTORE, ZINTERSTORE: new COUNT aggregator
• JSON.SET: new FPHA argument to specify the FP type for homogeneous FP arrays
• TS.RANGE, TS.REVRANGE, TS.MRANGE, TS.MREVRANGE: multiple aggregators in a single command
• FT.HYBRID KNN clause: new argument to request fewer candidates per shard
• FT.PROFILE HYBRID: profiling support for FT.HYBRID
• Performance improvements

Binary distributions

• Alpine and Debian Docker images - https://hub.docker.com/_/redis
• Install using snap - see https://github.com/redis/redis-snap
• Install using brew - see https://github.com/redis/homebrew-redis
• Install using RPM - see https://github.com/redis/redis-rpm
• Install using Debian APT - see https://github.com/redis/redis-debian

Operating systems we test Redis 8.8 on

• Ubuntu 22.04 (Jammy Jellyfish), 24.04 (Noble Numbat), 26.04 (Resolute Raccoon)
• Rocky Linux 8.10, 9.7, 10.1
• AlmaLinux 8.10, 9.7, 10.1
• Debian 12.13 (Bookworm), Debian 13.4 (Trixie)
• Alpine 3.23
• macOS 14.8.4 (Sonoma), 15.7.4 (Sequoia), 26.3 (Tahoe) - for both Intel and ARM

Bug fixes (compared to 8.8-RC1)

• redis/redis#15237 INCREX syntax update
• redis/redis#15005 Memory tracking can be enabled at runtime in non-clustered mode
• RedisTimeSeries/RedisTimeSerieshttps://github.com/redis/redis/pull/1930 Cluster topology changes during a multi-shard command are not handled (MOD-14439)
• RedisBloom/RedisBloomhttps://github.com/redis/redis/pull/1007 Memory leak on RDB load (MOD-15418)

Hashes

MSYS2 Builds Hashes

Algorithm : SHA256
Hash : D41CD514AB9D9D20A99FEB9D90E9C67AA90AF6D983050FFB237A3D8778117238
Path : D:\a\redis-windows-fork\redis-windows-fork\Redis-8.8.0-Windows-x64-msys2.zip

Included license files under LICENCES/: redis, msys2-runtime, libopenssl, gcc-libs
From workflow: https://github.com/taizod1024/redis-windows-fork/actions/runs/26401681134

Redis 8.6.3 for Windows

Update urgency: SECURITY: There are security fixes in the release.

Security fixes

• (CVE-2026-23479) Use-After-Free in unblock client flow may lead to Remote Code Execution
• (CVE-2026-25243) Invalid memory access in RESTORE may lead to Remote Code Execution
• (CVE-2026-23631) Lua Use-After-Free may lead to remote code execution
• (CVE-2026-25588) Invalid memory access in RESTORE may lead to Remote Code Execution (Time Series)
• (CVE-2026-25589) Invalid memory access in RESTORE may lead to Remote Code Execution (Probabilistic)

Bug fixes

• SUBSCRIBE, PSUBSCRIBE, SSUBSCRIBE: crash on OOM (RED-167788)
• CONFIG SET: some settings allow invalid characters (RED-167787)
• SCRIPT DEBUG: potential crash on scripts (RED-175507)
• VADD: crash or buffer overflow on large REDUCE value (RED-170921)
• VSET: crash on huge allocations (MOD-12678)
• Potential crash on disconnections and TLS failures (Time Series) (MOD-14850)
• RediSearch/RediSearch#8745 Crash when many keys receive expirations under heavy TTL activity (MOD-14500)
• RediSearch/RediSearch#8848 HNSW vector index memory growth under high-churn workloads until shard restart (MOD-13761)
• RediSearch/RediSearch#8205, RediSearch/RediSearch#8259 FT.HYBRID VSIM RANGE + FILTER incorrectly returns zero results (MOD-12370, MOD-13884)
• RediSearch/RediSearch#9182 FT.PROFILE HYBRID returns an empty reply (MOD-14778)
• RediSearch/RediSearch#8129, RediSearch/RediSearch#8140 FT.PROFILE reports an incorrect shard total profile time (MOD-13735, MOD-13181)
• RediSearch/RediSearch#9047 FT.PROFILE output is inconsistent when a profiled value is missing (MOD-10560)
• RediSearch/RediSearch#8791 FT.EXPLAIN does not lock, causing a race with concurrent index changes (MOD-14461)
• RediSearch/RediSearch#8382 Crash when indexing negative zero (-0.0) (MOD-13904)
• RediSearch/RediSearch#8590 FILTER returns inconsistent results with multiple indexes sharing field aliases (MOD-14063)
• RediSearch/RediSearch#8660 FILTER behavior depends on property order in the expression (MOD-14065)
• RediSearch/RediSearch#8593 Filter expressions are evaluated for indexes that do not match the document type (MOD-14064)
• RediSearch/RediSearch#8591 Documents are inconsistently included or excluded depending on the indexing path taken (MOD-13948)
• RediSearch/RediSearch#8589 RENAME notification handler loads the wrong key, causing stale index entries after a rename (MOD-14328)
• RediSearch/RediSearch#9012 PERSIST and HPERSIST notifications are not reflected in index expiration tracking (MOD-14800)
• RediSearch/RediSearch#9079 FT.SPELLCHECK treats PARAMS placeholders as literal terms instead of resolving them (MOD-10596)
• RediSearch/RediSearch#8462 GC out-of-memory on replica shards leaves the replica in an inconsistent state (MOD-14066)
• RediSearch/RediSearch#9066 Race condition in FT.HYBRID causes intermittent failures under concurrent hybrid query load (MOD-14732)
• RediSearch/RediSearch#8109, RediSearch/RediSearch#8149 Configuration registration omits module parameters, causing them to be unexposed or misapplied (RED-171841)
• RediSearch/RediSearch#9163 Crash on FT.SEARCH when topology validation fails (for example, some nodes unreachable) (MOD-14475)
• RediSearch/RediSearch#8395 FT.SEARCH fails with "Query requires unavailable slots" after shard restart or failover (MOD-13828)
• RediSearch/RediSearch#8451 FT.INFO-style output no longer reports zero-index summary data when no indices exist (MOD-14079)
• RediSearch/RediSearch#9078 FT.CREATE now rejects schema definitions with invalid option combinations at creation time (MOD-14655)
• RediSearch/RediSearch#8051, RediSearch/RediSearch#8114 Crash diagnostics now include the IndexSpec of the index the failing thread was working on (MOD-7574)

Metrics

• RediSearch/RediSearch#8210, RediSearch/RediSearch#8231 FT.PROFILE: added queue time tracking (MOD-13602)

Hashes

MSYS2 Builds Hashes

Algorithm : SHA256
Hash : 735BC4928F377B06281E1D8B5AAFE21D6569B43C8FDB012C274BFECBB72F98E7
Path : D:\a\redis-windows\redis-windows\Redis-8.6.3-Windows-x64-msys2.zip

Included license files under LICENCES/: redis, msys2-runtime, libopenssl, gcc-libs
From workflow: https://github.com/taizod1024/redis-windows/actions/runs/26347680875