redis

Redis released seven security patches and Valkey five on October 26; Valkey's advisory GHSA-f4q9-j22m-xqq9 names an integer truncation and lists a CVSS score of 8.8.

Redis 8.10.2, 8.8.3, 8.6.7, 8.4.7 and 8.2.10 ship security fixes; four close an ACL key-check gap at EXEC, and all add an opt-in refusal for unauthenticated cluster buses.

The first release candidate of Valkey 9.2 introduces fork-free backups, reusable ACL roles, a radix-tree Path Hash type, and a B+ tree for large sorted sets.

Redis 8.10 reaches general availability with a memory-saving compact hash encoding, a bulk-insert HIMPORT command, and a node-side BACKUP command built on multi-part AOF.

The Linux Foundation's Redis fork ships multi-tenant access control, native JSON logs, and throughput gains, cutting per-key memory by up to 10 percent.

Eighteen months after Redis changed its license, Valkey 9.0 has reached one billion requests per second, 346 contributors, and 75 percent of surveyed Redis users eyeing migration.