Update urgency: SECURITY: There are security fixes in the release.
Security fixes
- redis/redis#15673 Commands queued in a transaction could still access keys whose ACL permissions were revoked before the transaction was executed
- redis/redis#15722 The cluster bus protocol has no authentication of its own unless
tls-clusteris enabled, so any host able to reach a node's bus port could join the cluster and threaten it. A cluster node now warns at startup when its bus port is left unauthenticated, and the newcluster-bus-port-protected-modeoption (defaultno) makes refusing to run in that state an explicit choice: set it toyesand the node starts only whentls-clusterauthenticates the bus - TimeSeries: Prevented Redis from crashing when adding samples to a compressed Time Series key restored from a malformed RDB payload
- Vector Sets: Deeply nested JSON used in Vector Set queries could cause the server to crash
Hashes
MSYS2 Builds Hashes
Algorithm : SHA256
Hash : C2EBC76C007A12C96D7DD64E252A194D9E6A06FE801DFB834CA071314FD662E7
Path : D:\a\redis-windows\redis-windows\Redis-8.8.3-Windows-x64-msys2.zip
Algorithm : SHA256
Hash : 0F842DAFFB25797AD8717A19BC47D35FB04A3A94FE547E6FAC8C17EED3DB57FB
Path : D:\a\redis-windows\redis-windows\Redis-8.8.3-Windows-x64-msys2-with-Service.zip
Cygwin Builds Hashes
Algorithm : SHA256
Hash : BB19F830CA5BF62718E81F230833F968B90ECFD675557CAF3C1478C4E65BD98C
Path : D:\a\redis-windows\redis-windows\Redis-8.8.3-Windows-x64-cygwin.zip
Algorithm : SHA256
Hash : CE926F3C17728BD5250EFACFDA27ABACFE8AA13FB9F1B7545E974A3221F51467
Path : D:\a\redis-windows\redis-windows\Redis-8.8.3-Windows-x64-cygwin-with-Service.zip
From workflow: https://github.com/redis-windows/redis-windows/actions/runs/35414969678