title: Redis Enterprise Software Release Notes 6.0.20 (April 2021)

summary: Role-based LDAP integration. Enhanced client mutual authentication. Active-Active improvements for eviction policies, migration, and the BITFIELD data type.

title: Overview

text:
[Redis Enterprise Software version 6.0.20](https://redislabs.com/redis-enterprise-software/download-center/software/)
is now available! This version includes the following new features and
improvements:

-   A [new integration for LDAP]() authentication and
    authorization into RS role-based access controls (RBAC). You can now use
    LDAP to authorize access to the admin console and to authorize database
    access.

-   An enhanced [clients mutual authentication]()
    mechanism, adding the ability to authenticate client connections using a
    Certificate Authority (CA).

-   Support of [Redis eviction
    policies]()
    on
    [Active-Active]()
    Redis databases.

-   A new [migration process for Active-Active]()
    Redis database using the Active-Passive (Replica Of) mechanism.

-   Support for the [BITFIELD data type on Active-Active]()
    Redis databases.

And other functional and stability improvements.

title: Version information

title: Upgrade instructions

text:
-   Follow [these instructions]()
    for upgrading to Redis Software 6.0.20 from Redis Software 5.6.0 and above.

    -   Note that upgrades from earlier Redis Software versions are not supported.

-   For Active-Active deployments, this release requires that you [upgrade the CRDB featureset version]().

-   Upgrades of Active-Active databases to Redis Software 6.0.20, will require all their
    instances to run with protocol version 1 and featureset version 1 or above.
    Active-Active databases running on protocol version 0 and/or featureset
    version 0 will block the upgrade.

title: Product lifecycle information

text:
-   End of Life (EOL) for Redis Enterprise Software 6.0 and earlier
    versions, can be found
    [here]().

-   EOL for Redis modules can be found
    [here]().

title: Deprecation Notice

text:
-   Upgrades to the next Redis Software will be enabled from version 6.0 and above.

-   Support for the SASL-based LDAP mechanism was deprecated in v6.0.20.  As of v6.2.12, support has been removed and the feature is obsolete.

-   Starting with Redis Software version 6.0.12, Envoy replaces Nginx for internal cluster administration.
    Support for Nginx is considered deprecated, it will be removed in a future
    version.

title: New Features

text:
#### New LDAP integration

Redis Enterprise Software integrates Lightweight Directory Access Protocol
(LDAP) authentication and authorization into its [role-based access controls]()
(RBAC). You can now use LDAP to authorize access to the admin console and to
manage database access.

#### Clients Mutual TLS authentication using a Certificate Authority (CA)

Redis Enterprise Software adds the ability to use a Certificate Authority (CA)
for client authentications, allowing clients to rotate their certificates
without the need to load new certificates to your database.

#### Redis eviction policies on Active-Active Redis databases

All Redis [eviction policies]()
are now supported on Active-Active Redis databases. You can create new
Active-Active databases or edit existing ones using the UI console to enable it.

-   Note that eviction is not supported yet for Active-Active Redis databases
    running with Auto Tiering .

#### Migration to an Active-Active Redis database

Redis Enterprise Software adds the ability to easily [migrate your Redis
database to an Active-Active]()
Redis database using the Active-Passive (Replica Of) mechanism.

#### BITFIELD on Active-Active Redis databases

Redis Enterprise Software adds the ability to use the BITFIELD data type on
Active-Active Redis databases. Please read more about [developing for Active-Active with BITFIELD]()
to understand the conflict resolution and limitations.

title: Redis modules

text:
The following GA releases of Redis modules are bundled with Redis Software 6.0.20:
(Please read the below updates for 6.0.20-97)

-   [RediSearch](https://redislabs.com/redis-enterprise/redis-search/), version
    [2.0.6]()

-   [RedisJSON](https://redislabs.com/redis-enterprise/redis-json/), version
    [1.0.7]()

-   [RedisGraph](https://redislabs.com/redis-enterprise/redis-graph/), version
    [2.2.14]()

-   [RedisTimeSeries](https://redislabs.com/redis-enterprise/redis-time-series/),
    version
    [1.4.8]()

-   [RedisBloom](https://redislabs.com/redis-enterprise/redis-bloom/), version
    [2.2.4]()

To use the updated modules with a database, you must [upgrade the module on the
database]().

title: Additional capabilities

text:
-   Redis Software 6.0.20 includes open source Redis 6.0.9. For more information about Redis
    6.0.9, check out the [release notes](https://raw.githubusercontent.com/redis/redis/6.0.9/00-RELEASENOTES).

-   Redis Software 6.0.20 adds new `rladmin` commands for setting Ciphers suites and minimal
    TLS version for:

    -   Control plane: setting Envoy

    -   Data plane: setting the Proxy for clients connections

    -   Sentinel discovery service

-   Starting with Redis Software 6.0.20, new clusters will be set with minimal TLS version v1.2

All known bugs around setting ciphers were fixed.  To learn more, see [Configure cipher suites]().

-   Starting with Redis Software 6.0.20, the [syncer process](#syncer-process)
    was improved to automatically recover and resume synchronisation after
    reaching out-of-memory.

-   Envoy updated and verified with multiple security headers.

-   Starting with Redis Software 6.0.20:

    -   The replication backlog size of new databases is allocated dynamically according to shard size.

    -   The Active-Active replication backlog size of new Active-Active databases is allocated dynamically according to shard size.

title: Important fixes

text:
-   RS50905, RS54809, 54940 - Fix in Redis preventing missing process PID

-   RS53639 - Fix to avoid stuck state machine when assigning incorrect Redis
    ACL with the allkeys alias or \~\* and also with \~\<somekey\>

-   RS47983 - Fixed dependencies with installation using custom directories

-   RS54382 - Fixed missing API documentation

-   RS52433, RS53417, RS42195, RS42194, RS30526, RS46821, RS48928 - Fixed
    security headers for Envoy

title: Starting 6.0.20-69

text: -   RS55504 - Fixed issue that caused RediSearch cursor to break.

title: Starting 6.0.20-97

text:
-   RS57659 - Fixed force removing an Active-Active instance which is hosted on an inaccessible cluster
-   RS57315 - Fixed creation and editing of an Active-Active database with LDAP users of the new RBAC LDAP integration. This applies to UI access and REST API and does not apply to LDAP users for database access via Redis Clients
-   RS57073 - Fixed a bug caused in the shard migration process which could leave unattended shards on the node
-   RS56508 - Fixed backwards compatibility of client certificate when upgrading from earlier versions and using a certificate chain with Extended Key Usage extension being set to "TLS Web Server Authentication" instead of "TLS Web Client Authentication"
-   RS49289 - Fixed updating the log rotation config file according to the custom config path that was set during the installation
-   The bundled RedisGraph module was upgraded to v2.4.6
-   The bundled RedisTimeSeries module was upgraded to v1.4.9
-   The bundled RediSearch module was upgraded to v2.0.8

title: Known limitations

text:
-RS81463 - A shard may crash when resharding an Active-Active database with Auto Tiering . Specifically, the shard will crash when volatile keys or Active-Active tombstone keys reside in Flash memory.
-   RS59983 - Clients may get disconnected by the proxy when one client sends an UNSUBSCRIBE command without being subscribed to any channel and disconnect before the response returns back from the server (from the proxy).
-   RS60068 - The pdns might not resolve the master node after master node change. Restarting the pdns service is required in this case.
-   RS61114 - Active-Active synchronization will fail in the following scenario: a new syncer connection is established AND a partial sync (psync) was initiated AND a cron job runs before the first ACK of the psync was received.
-   RS55504 - Bug RS6.0.20-66 (Build #66) causes RediSearch cursor to break. Please upgrade to a higher build when running with RediSearch.

title: Installation limitations

text:
Several Redis Enterprise Software installation reference files are installed to the directory `/etc/opt/redislabs/` even if you use [custom installation directories]().

As a workaround to install Redis Enterprise Software without using any root directories, do the following before installing Redis Enterprise Software:

1. Create all custom, non-root directories you want to use with Redis Enterprise Software.

1. Mount `/etc/opt/redislabs` to one of the custom, non-root directories.

#### Upgrade

-   [Redis Software 5.4.2]()
    introduced new Active-Active Redis Database capabilities that improve its
    compatibility with open source Redis. Now the string data-type in
    Active-Active Redis Database is implicitly and dynamically typed, just like
    open source Redis. To use the new capabilities on nodes that are upgraded
    from version RS 5.4.2 or lower, you must
    [upgrade the Active-Active Redis Database protocol]().

-   When you upgrade an Active-Active Redis with active AOF from [Redis Software 5.4.2]()
    or earlier to version [Redis Software 5.4.4]()
    or later:

    -   If replication is enabled, you must run the BGREWRITEAOF command on all
        replica shards after the upgrade.

    -   If replication is not enabled, you must run the BGREWRITEAOF command on
        all shards after the upgrade.

-   Node upgrade fails if the SSL certificates were configured in version 5.0.2
    or above by manually updating the certificates on the disk instead of
    [updating them through the API]().
    For help with this issue, contact Support.

-   Starting from [Redis Software 5.4.2](),
    to preserve the current Redis major.minor version during database upgrade
    you must use the keep_redis_version option instead of keep_current_version.

#### Redis commands

-   The capability of disabling specific Redis commands does not work on
    commands specific to Redis modules.

-   CLIENT UNBLOCK command is not supported in RS 5.4 and above

-   Starting from RS 5.4.2 and after upgrading the CRDB, TYPE commands for
    string data-type in CRDBs return "string" (OSS Redis standard).

#### Security

-   As part of Redis commitment to security, the following [Open Source Redis](https://github.com/redis/redis) [CVE's](https://github.com/redis/redis/security/advisories) have been addressed in Redis Enterprise 6.0.20:

    -   [CVE-2021-32626](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32626) - Lua scripts can overflow the heap-based Lua stack. This has been addressed in Redis Enterprise 6.0.20-62

    -   [CVE-2021-32627](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32627) - Integer overflow issue with Streams. This has been addressed in Redis Enterprise 6.0.20-1

    -   [CVE-2021-32628](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32628) - Vulnerability in handling large ziplists. This has been addressed in Redis Enterprise 6.0.20-1

    -   [CVE-2021-32687](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32687) - Integer overflow issue with intsets. This has been addressed in Redis Enterprise 6.0.20-89

-   The following [Open Source Redis](https://github.com/redis/redis) [CVE's](https://github.com/redis/redis/security/advisories) do not affect Redis Enterprise:

    -   [CVE-2021-32625](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32625) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis since Redis Enterprise does not implement `LCS`. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.4, Redis 6.0.14)

    -   [CVE-2021-32672](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32672) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the LUA debugger is unsupported in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

    -   [CVE-2021-32675](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32675) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proxy in Redis Enterprise does not forward unauthenticated requests. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

    -   [CVE-2021-32762](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32762) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the memory allocator used in Redis Enterprise is not vulnerable. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

    -   [CVE-2021-41099](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41099) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proto-max-bulk-len CONFIG is blocked in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)


title: Redis Enterprise Software Release Notes 6.0.8 (September 2020)

summary: RediSearch 2.0 support. Improved rladmin support for module upgrades.

page_type: content

title: Overview

role: overview

text:
[Redis Enterprise Software (RS) 6.0.8](https://redislabs.com/download-center/#downloads) is now available!
This version includes the new RediSearch 2.0 module, open source Redis 6.0.5, changes the rladmin tool for upgrading modules, and includes bug fixes.

title: Version information

role: compatibility

title: Upgrade instructions

role: content

text:
Follow [these instructions]() for upgrading to RS 6.0.8 from RS 5.4.0 and above.
For Active-Active deployments, this release requires that you [upgrade the CRDB featureset version]().

title: End of life

text:
End of Life (EOL) for Redis Enterprise Software 6.0 and previous RS versions, can be found [here]().
EOL for Redis Modules can be found [here]().

- Support for Red Hat Enterprise Linux 6 and Oracle Linux 6 [operating systems platforms]() will end on November 30, 2020.
- Support for Ubuntu 14.04 (Trusty Tahr) [operating systems platforms]() will end on November 30, 2020.

title: New features

title: Open source Redis 6

text:
RS 6.0 includes open source Redis 6.0.5.
For more information about Redis 6.0.5, check out the [release notes](https://raw.githubusercontent.com/redis/redis/6.0.5/00-RELEASENOTES).

title: Upgrading Redis modules via rladmin

text:
The [`rladmin` CLI]() introduces several updates to the commands for upgrading modules.
It is now easier to upgrade your modules to the latest module version.
Find out more [here]().

title: Redis modules

text:
The following GA releases of Redis Modules are bundled in RS 6.0:

- [RediSearch](https://redislabs.com/redis-enterprise/redis-search/), version [2.0]() (updated)
- [RedisJSON](https://redislabs.com/redis-enterprise/redis-json/), version [1.0.4]()
- [RedisGraph](https://redislabs.com/redis-enterprise/redis-graph/), version [2.0.19]() (updated)
- [RedisTimeSeries](https://redislabs.com/redis-enterprise/redis-time-series/), version [1.2.7]() (updated)
- [RedisBloom](https://redislabs.com/redis-enterprise/redis-bloom/), version [2.2.4]() (updated)

To use the updated modules with a database, you must [upgrade the module on the database]().

title: Additional capabilities

text:
- [Shard level metrics]() have been added to the metrics_exporter and are now available from Prometheus. You can find all of the metrics [here]().

- RS DEB packages (for Ubuntu) and RPM packages (for RHEL) are now signed with a GPG key so customers can verify that the package is authentic and has not been tampered with. You can access the GPG on the [installaion page]().

- The [`crdb-cli`]() history log is now being added to support packages.

title: Important fixes

text:
- RS33193 - Improved log files handling in the proxy for large files.
- RS43572 - Fixed a bug causing the UI to fail when enabling SMTP STARTLS.
- RS46062 - Fixed missing metrics of Active-Active databases in Grafana.
- RS44758 - Fixed non responding button for saving a new user via the UI.
With build 6.0.8-32:
- RS45627, RS47382 - Fixed bugs causing clients to disconnect when using XREAD and XREADGROUP commands in blocking mode on other clients’ connections.

title: Known limitations

text: -RS81463 - A shard may crash when resharding an Active-Active database with Auto Tiering . Specifically, the shard will crash when volatile keys or Active-Active tombstone keys reside in Flash memory.

title: Active-Active databases

text:
- RS44656 - A bug causing TLS mode for clients connections to toggle between ‘all communication’ to ‘for crdb communication only’ when performing a global configuration change. ***TBD***
- RS51359 - Active-Active databases, using replication and Append Only File (AOF) for [Database persistence](), are suffering from memory leaks on replica shards, causing them to grow bigger than the master shards. Customers are advised to upgrade to RS 6.0.12 ***TBD***. Meanwhile you can use snapshots for database persistence or restart the replica shards ***TBD***.

title: Installation limitations

role: setup

text:
Several Redis Enterprise Software installation reference files are installed to the directory `/etc/opt/redislabs/` even if you use [custom installation directories]().

As a workaround to install Redis Enterprise Software without using any root directories, do the following before installing Redis Enterprise Software:

1. Create all custom, non-root directories you want to use with Redis Enterprise Software.

1. Mount `/etc/opt/redislabs` to one of the custom, non-root directories.

title: Upgrade

text:
- [RS 5.4.2]() introduced new Active-Active Redis Database capabilities that improve its compatibility with open source Redis. Now the string data-type in Active-Active Redis Database is implicitly and dynamically typed, just like open source Redis. To use the new capabilities on nodes that are upgraded from version RS 5.4.2 or lower, you must [upgrade the Active-Active Redis Database protocol]().
- When you upgrade an Active-Active Redis with active AOF from version [RS 5.4.2]() or lower to version [RS 5.4.2]() or higher:
    - If replication is enabled, you must run the BGREWRITEAOF command on all replica shards after the upgrade.
    - If replication is not enabled, you must run the BGREWRITEAOF command on all shards after the upgrade.
- Node upgrade fails if the SSL certificates were configured in version 5.0.2 or above by manually updating the certificates on the disk instead of [updating them through the API]().
    For assistance with this issue, contact [Support](https://redislabs.com/support).
- Starting from [RS 5.4.2](), to preserve the current Redis major.minor version during database upgrade you must use the keep_redis_version option instead of keep_current_version.

title: Redis commands

text:
- The capability of disabling specific Redis commands does not work on commands specific to Redis Modules.
- Starting from RS 5.4.2 and after you upgrade an Active-Active database, TYPE commands for string data-type in Active-Active databases return "string" (OSS Redis standard).


title: Redis Enterprise Software Release Notes 6.0 (May 2020)

summary: ACL and RBAC improvements for database access. Active-Active databases support Redis Streams.

title: Overview

text:
[Redis Enterprise Software (RS) 6.0](https://redislabs.com/download-center/#downloads) is now available!
This new version bundles open-source Redis 6, implements enhanced Access Control List (ACL) capabilities using Role-Based Access Control (RBAC) for database access, and adds the support of Redis Streams on Active-Active databases.

title: Version information

title: Upgrade instructions

text:
Follow [these instructions]() for upgrading to RS 6.0 from RS 5.4.0 and above.
For Active-Active deployments, this release requires that you [upgrade the CRDB featureset version]().

title: End of life

title: New features

title: Open source Redis 6

text:
RS 6.0 bundles latest open source Redis 6.
For more information, check out the [Diving into Redis 6](https://redislabs.com/blog/diving-into-redis-6/) article.

title: Access control list (ACL)

text:
Based on OSS Redis 6, RS 6.0 offers the ability to manage and control connections to your databases using users and their data access permissions in terms of commands they can execute and keys they can access.

In OSS Redis, the ACLs are managed separately per user for each database. In Redis Enterprise Software, Redis ACLs are managed for the databases at the cluster.
For more information, check out the [Redis Enterprise Software user management documentation]().

title: Role-based access control (RBAC)

text:
RS 6.0 leverages Redis ACLs to implement role-based access control that easily scale and manage data access permissions. Using roles minimizes the overhead involved in managing a cluster with many databases, multiple users, and various access control lists.
For more information, check out the [Redis Enterprise Software user management documentation]().

title: Active-Active support for Redis Streams

text:
RS 6.0 adds support for Redis streams on Active-Active geo-distributed databases using conflict-free replicated data type (CRDT). You can now use all Redis streams commands including consumer groups on Active-Active databases. To enable it, [upgrade your Active-Active database]() featureset version to the latest (featureset version = 2) as part of the upgrade process.
For more information, check out [Redis Streams on Active Active databases]().

title: Redis modules

text:
The following GA releases of Redis Modules are bundled in RS 6.0:

- [RedisBloom](https://redislabs.com/redis-enterprise/redis-bloom/), version [2.2.2]() (updated)
- [RedisGraph](https://redislabs.com/redis-enterprise/redis-graph/), version [2.0.11]() (updated)
- [RedisJson](https://redislabs.com/redis-enterprise/redis-json/), version [1.0.4]()
- [RediSearch](https://redislabs.com/redis-enterprise/redis-search/), version [1.6.12]() (updated)
- [RedisTimeSeries](https://redislabs.com/redis-enterprise/redis-time-series/), version [1.2.5]() (updated)

To use the updated modules with a database, you must [upgrade the module on the database]().

title: Additional capabilities

text:
- Added the ability to configure a storage service that uses the S3 protocol. Configuration for [backup location]() and for [import]() and [export]() locations of [RDB files]() is possible. The storage service must have a valid SSL certificate. To connect to an S3-compatible storage location, run: `rladmin cluster config s3_url <url>`

- The crdb-cli tool was updated so it is now displaying the Active-Active database’s featureset version and the protocol version per instance. For example:

    [code example]

- Added REST API and rladmin commands to modify the timeout for [automatically disconnecting an inactive admin console session]().
    - Using the rladmin run: `rladmin cluster config cm_session_timeout_minutes <int_value>`
    - Using the REST API:

        [code example]

- Added `no_of_expires` metrics for database metrics and for shard metrics. You can access this metric from the REST API:
    - `no_of_expires` shows the current number of volatile keys in the database.
    - `expired_objects` shows the rate of keys expired in DB (expirations/sec).

- Added the ability to customize the welcome message on the login page in the admin console console.

title: Important fixes

text:
- RS39121, RS35335 - Optimized the XREAD and XREADGROUP commands so when using them in a non blocking fashion (without BLOCK keyword) they use the shared connection instead of a dedicated connection.
- RS26448 - Fixed ‘ram overhead’ metric calculation for ROF databases using AOF.
- RS31190 - Fixed a bug that causes databases with OSS Cluster API enabled to override the ‘preferred IP type’ attribute from ‘external’ to ‘internal’ (the default value).
- RS34009 - Updated the modules loading procedure for clusters with FIPS compliance enabled.
- RS38233 - Improved the Redis cleanup job handling the persistent directory
- RS39228 - Fixed a bug in the WAIT command that in some cases was  released after a longer period than requested.
- RS39749 - Fixed a bug that blocked eviction while LUA scripts were in progress.
- RS43996 - Fixed a bug when aborting an upgrade to RS 6.0.

title: Known limitations

title: Active-Active databases

text: - RS51359 - Active-Active databases, using replication and Append Only File (AOF) for [database persistence](), are suffering from memory leaks on replica shards, causing them to grow bigger than the master shards. Customers are advised to upgrade to RS 6.0.12 ***TBD***. Meanwhile you can use snapshots for database persistence or restart the replica shards ***TBD***.

title: Installation limitations

title: Upgrade

text:
- RS 5.4.2 introduced new Active-Active Redis Database capabilities that improve its compatibility with open source Redis. Now the string data-type in Active-Active Redis Database is implicitly and dynamically typed, just like open source Redis. To use the new capabilities on nodes that are upgraded from version RS 5.4.2 or lower, you must upgrade the Active-Active Redis Database protocol.
- When you upgrade an Active-Active Redis with active AOF from version RS 5.4.2 or lower to version RS 5.4.4 or higher:
    - If replication is enabled, you must run the BGREWRITEAOF command on all replica shards after the upgrade.
    - If replication is not enabled, you must run the BGREWRITEAOF command on all shards after the upgrade.
- Starting from RS 5.4.2, to preserve the current Redis major.minor version during database upgrade you must use the keep_redis_version option instead of keep_current_version.
- Dynatrace agent installed on the cluster nodes can hamper the working on Envoy process leading to failure of UI and REST API. Prior upgrading we recommend removing Dynatrace completely or try upgrading to newer versions.

title: Redis commands

code:
$ crdb-cli crdb list --verbose
    CRDB-GUID               NAME                REPL-ID	PROTOCOL    FEATURESET    DB-ID     CLUSTER-FQDN
    969122be-...	loremipsum1           1	      0 	   	 0	    bdb:1       cluster1.local
    969122be-...	loremipsum1           2	      0 	   	 0	    bdb:1       cluster2.local

section_id: additional-capabilities

code:
curl --request PUT \
        --url https://localhost:9443/v1/cluster \
        --header 'content-type: application/json' \
        --data '{
            "cm_session_timeout_minutes": 10
        }'


title: Redis Enterprise Software Release Notes 6.2.10 (February 2022)

summary: Python 3 support. RHEL 8.5 support.

title: Overview

text:
[Redis Enterprise Software version 6.2.10](https://redislabs.com/redis-enterprise-software/download-center/software/) is now available!

The following table shows the MD5 checksums for the available packages.

|Package| MD5 Checksum |
|:------|:-------------|
| Ubuntu 16 | `531cea69a58fbc1125bc5f76ba01da7f` |
| Ubuntu 18 | `ec9ac6e0111dc85605d3b98e83f50150` |
| RedHat Enterprise Linux (RHEL) 7
Oracle Enterprise Linux (OL) 7 | `2f7572caab9600417ef8b4ee474d6768` |
| RedHat Enterprise Linux (RHEL) 8
Oracle Enterprise Linux (OL) 8 | `377a539ee050515e1e0640dec1e04129` |
| K8s Ubuntu | `099192416a70a12790535bdcd78a6e87` |
| K8s RHEL   | `f267abe81770ddf36f022232f4c2cb2e` |

title: Features and enhancements

text:
- Upgrade the Redis Enterprise infrastructure to [Python v3.9](https://www.python.org/).

- [Red Hat Enterprise Linux (RHEL) v8.5](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/index) and [Red Hat Enterprise Linux (RHEL) v8.6](https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/index) is now a [supported platform]().

- [Oracle Linux v8](https://docs.oracle.com/en/operating-systems/oracle-linux/8/) is now a [supported platform]().

- Compatibility with [open source Redis 6.2.5](https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES).

- Compatibility with the [security fixes](https://github.com/redis/redis/releases/tag/6.2.6) of the latest [open source Redis 6.2.6](https://github.com/redis/redis/releases/tag/6.2.6).

- Enhancements and bug fixes.

title: Version changes

title: Prerequisites and notes

text:
-  You can [upgrade to v6.2.10]() from Redis Enterprise Software v6.0 and later.

- Refer to [v6.2.4 release notes]() for important notes regarding changes made to the upgrade.

- Upgrades from versions earlier than v6.0 are not supported.

- If you plan to upgrade your cluster to RHEL 8, refer to [v6.2.8 release notes]() for known limitations.

- If you are using Active-Active or Active-Passive (ReplicaOf) databases and experience synchronization issues as a result of the upgrade, see RS67434 details in [Resolved issues](#resolved-issues) for help resolving the problem.

title: Product lifecycle updates

text:
Redis Enterprise Software v6.0.x will reach end of life (EOF) on May 31, 2022.

To learn more, see the Redis Enterprise Software [product lifecycle](), which details the release number and the end-of-life schedule for Redis Enterprise Software.

For Redis modules information and lifecycle, see [Module lifecycle]().

title: Redis modules

text:
Redis Enterprise Software v6.2.10 includes the following Redis modules:

- [RediSearch v2.2.6]()
- [RedisJSON v2.0.6]()
- [RedisBloom v2.2.9](release-notes/)
- [RedisGraph v2.4.12]()
- [RedisTimeSeries v1.4.13]()

Starting with Redis Enterprise Software v6.2.10 build 121, the included modules versions are:

- [RediSearch v2.4.6]()
- [RedisJSON v2.0.8]()
- [RedisBloom v2.2.14](release-notes/)
- [RedisGraph v2.8.12]()
- [RedisTimeSeries v1.6.9]()

For help upgrading a module, see [Add a module to a cluster](#upgrading-the-module-for-the-database).

title: Interface enhancements

text:
- When choosing RedisJSON, the user interface (UI) now suggests RedisSearch as well. To learn more, see the [RedisJSON preview announcement](https://redis.com/blog/redisjson-public-preview-performance-benchmarking/), which details the benefits of combining [RedisJSON](http://redisjson.io/) and [RediSearch](http://redisearch.io/).
- Adds the ability to sort the columns of the node list (RS48256).
- When creating a new geo-distributed (Active-Active) database, an endpoint port is no longer required.  The system assigns one if none if provided (RS27632).

title: Additional enhancements

text:
- Added an option to run a connectivity health check for the management layer of Active-Active databases. Run the following REST API command:

    [code example]

- Added TLS handshake error messages to the DMC proxy log (RS59346).

title: Resolved issues

text:
- RS58219 - Fixes a UI error message that showed a path instead of a relevant error message.
- RS44958 - Fixes incorrect description for the graph "incoming traffic" in Active-Active (geo-distributed) database UI Metrics.
- RS66280 - Fixes the lexicographic [SORT]() command on Active-Active databases (e.g. `SORT mylist ALPHA`). The SORT command should only run on keys mapped to the same slot.
- RS64575 - Fixes a bug in the replication between primary and replica shards of a destination Active-active database in the scenario of using Replica-Of from a single to an Active-Active database, where the syncer process went down during the full sync.
- RS65370 - Adds logic to remove old syncer entries in the cluster configuration during upgrades.
- RS67434 - Version 6.2.10 fixes the mTLS handshake between the [syncer process](#syncer-process) and the [proxy (DMC)](https://docs.redis.com/latest//rs/references/terminology/#proxy), where the proxy presented a leaf certificate without its full chain to the syncer. After upgrading to 6.2.10, syncer connections using invalid certificates will break the synchronization between Active-Active instances or deployments using Replica Of when TLS is enabled. To ensure certificates are valid before upgrading do the following:

    - For Active-Active databases, run the following command from one of the clusters:

        `crdb-cli crdb update --crdb-guid <CRDB-GUID> --force`

    - For Active-Passive (Replica Of) databases: use the admin console to verify that the destination syncer has the correct certificate for the source proxy (DMC).  For details, see [Configure TLS for Replica Of](create/#configure-tls-on-replica-database).

title: Issues resolved in build 96

text:
- RS67133 - An issue in Redis Enterprise Software affected replication in replica databases using RedisGraph, RediSearch, and RedisGears in specific scenarios.  The problem appeared when importing an RDB file or while synchronizing target Active-Passive (ReplicaOf) databases.

    This issue is fixed in Redis Enterprise Software v6.2.10-96 and RedisGraph v2.8.11.  We recommend upgrading to these versions at your earliest opportunity.  (Failure to upgrade can lead to data loss.)

    Once the upgrades are complete, secondary shards might need to be restarted.  You can use `rlutil` to restart secondary shards:

    [code example]

title: Issues resolved in build 100

text: - RS74171 - A new command was added as part of Redis 6.2: [XAUTOCLAIM](). When used in an Active-Active configuration, this command may cause Redis shards to crash, potentially resulting in data loss. The issue is fixed in Redis Enterprise Software version 6.2.12. Additionally, we recommend enabling AOF persistence for all Active-Active configurations.

title: Issues resolved in build 121

text:
- RS68668, RS72082 - Improvements for internode encryption certification rotation
- RS72304 - Avoid starting a master shard when both master and replica shards crash and the replica did not finish recovery
- RS74469 - Fix for some Redis Active-Active + Redis Streams scenarios that could lead to shard crash during backup; failure to backup

title: Issues resolved in build 129

text:
- RS77003 - Add grace time to job scheduler to allow certificate rotation in case of failure due to scheduling conflicts.
- RS71112 - Update validation during db configuration to not fail due to ports associated with nodes that are no longer in the cluster. This was done to allow db configuration during adding and removing nodes as part of load balancing.
- RS78486 - Fix known issue from 6.2.10 build 100 - When using rladmin tune db to change the replica buffer size, the command appears to succeed, but the change does not take effect.

title: Known limitations

text:
- RS81463 - A shard may crash when resharding an Active-Active database with Auto Tiering . Specifically, the shard will crash when volatile keys or Active-Active tombstone keys reside in Flash memory.

- RS78364 - When using `rladmin tune db` to change the replica buffer size, the command appears to succeed, but the change does not take effect. This issue was introduced in build 100; it will be fixed in a future build of Redis Enterprise Software v6.2.10 and in the next release (v6.2.12).

- RS63258 - Redis Enterprise Software is not currently supported on RHEL 8 with FIPS enabled.

    FIPS changes system-generated keys, which can limit secure access to the cluster or the admin console via port 8443.

- RS63375 - RHEL 7 clusters cannot be directly upgraded to RHEL 8 when hosting databases using modules.

    Due to binary differences in modules between the two operating systems, you cannot directly update RHEL 7 clusters to RHEL 8 when those clusters host databases using modules.  Instead, you need to create a new cluster on RHEL 8 and then migrate existing data from your RHEL 7 cluster. This does not apply to clusters that do not use modules.

All [known limitations]() listed in the v6.2.4 release notes have been addressed.

title: Installation limitations

title: Known issues

text:
- The `ZRANGESTORE` command, with a special `zset-max-ziplist-entries` configuration can crash Redis 6.2. See [Redis repository 10767](https://github.com/redis/redis/pull/10767) for more details.

- RS40641 - API requests are redirected to an internal IP in case the request arrives from a node which is not the master. To avoid this issue, use [`rladmin cluster config`]() to configure `handle_redirects` or `handle_metrics_redirects`.

title: Security

role: security

title: Open Source Redis Security fixes compatibility

text:
As part of Redis commitment to security, Redis Enterprise Software implements the latest [security fixes](https://github.com/redis/redis/releases) available with open source Redis. The following [Open Source Redis](https://github.com/redis/redis) [CVE’s](https://github.com/redis/redis/security/advisories) do not affect Redis Enterprise:

- [CVE-2021-32625](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32625) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis since Redis Enterprise does not implement LCS. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.4, Redis 6.0.14)

- [CVE-2021-32672](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32672) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the LUA debugger is unsupported in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-32675](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32675) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proxy in Redis Enterprise does not forward unauthenticated requests. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-32762](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32762) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the memory allocator used in Redis Enterprise is not vulnerable. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-41099](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41099) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proto-max-bulk-len CONFIG is blocked in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)security fixes for [recent CVE’s](https://github.com/redis/redis/security/advisories). Redis Enterprise has already included the fixes for the relevant CVE’s. Some CVE’s announced for Open Source Redis do not affect Redis Enterprise due to different and additional functionality available in Redis Enterprise that is not available in Open Source Redis.

section_id: additional-enhancements


title: Redis Enterprise Software release notes 6.2.12 (August 2022)

summary: OCSP Support. Password & session configuration changes. RHEL 8.6 support.

title: Overview

text:
[Redis Enterprise Software version 6.2.12](https://redislabs.com/redis-enterprise-software/download-center/software/) is now available!

This version of Redis Enterprise Software offers:

- OCSP stapling of the server proxy certificate
- Password and session configuration settings via the admin console
- Compatibility with open source Redis v6.2.6
- Support for Red Hat Enterprise Linux (RHEL) v8.6
- Additional enhancements and fixes

The following table shows the MD5 checksums for the available packages.

|Package| MD5 Checksum |
|:------|:-------------|
| Ubuntu 16 | `e702c906f200940e06ef031e6b8006d9` |
| Ubuntu 18 | `7ea70067e8828b59336380df087fe03d` |
| RedHat Enterprise Linux (RHEL) 7
Oracle Enterprise Linux (OL) 7 | `8ffda6186f70354b9d10c1ce43938c3c` |
| RedHat Enterprise Linux (RHEL) 8
Oracle Enterprise Linux (OL) 8 | `334fe7979a7376b28fcf48913403bfb7` |

title: Features and enhancements

text:
- Server side OCSP Stapling

    [Online Certificate Status Protocol](https://en.wikipedia.org/wiki/Online_Certificate_Status_Protocol) (OCSP) helps verify the status of certificates managed by a third-party [certificate authority](https://en.wikipedia.org/wiki/Certificate_authority) (CA).  It tells you whether certificates are valid, revoked, or unknown.

    Redis Enterprise Software v6.2.12 implements OCSP stapling, which allows clients to validate the status of a server proxy certificate.  When OCSP is enabled, the Redis Enterprise server regularly polls the CA OCSP responder to determine a certificate's status.  The response is cached until the next polling attempt; the cached value is served to clients during the [TLS handshake](https://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_handshake).

    To learn more, see [Enable OCSP stapling]().

- Session and security attributes in the admin console

    You can now use the admin console to configure [password complexity rules](#password-complexity-rules), [user login lockout](access-control/manage-users/login-lockout/#user-login-lockout), and [session timeout](access-control/manage-users/login-lockout/#session-timeout).

- Mount point import enhancement

    When importing data, Redis Enterprise copies files to a temporary directory on the node. For mount point import sources only, Redis Enterprise now reads files directly from the mount point. Because this import method does not copy files to a temporary directory, nodes do not require extra disk space. This new behavior is enabled by default and does not require configuration.

title: Version changes

title: Prerequisites and notes

text:
-  You can [upgrade to v6.2.12]() from Redis Enterprise Software v6.0 and later.

- Refer to [v6.2.4 release notes]() for important notes regarding changes made to the upgrade policy and how those changes might impct your experience.

- Upgrades from versions earlier than v6.0 are not supported.

- If you are using the earlier cluster-based LDAP mechanism, you _must_ migrate to the role-based mechanism _before_ upgrading to v6.2.12.  For details, see [Migrate to role-based LDAP]().

- If you plan to upgrade your cluster to RHEL 8, see the [v6.2.8 release notes]() for known limitations.

title: Future deprecation notice

text:
#### TLS 1.0 and TLS 1.1

TLS 1.0 and TLS 1.1 connections are considered deprecated in favor of TLS 1.2 or later.

Please verify that all clients, apps, and connections support TLS 1.2.  Support for the earlier protocols will be removed in a future release.

Certain operating systems, such as RHEL 8, have already removed support for the earlier protocols.  Redis Enterprise Software cannot support connection protocols that are not supported by the underlying operating system.

title: Product lifecycle updates

text:
Redis Enterprise Software v6.0.x will reach end of life (EOL) on May 31, 2022.

To learn more, see the Redis Enterprise Software [product lifecycle](), which details the release number and the end-of-life schedule for Redis Enterprise Software.

For Redis modules information and lifecycle, see [Module lifecycle]().

title: Redis modules

text:
Redis Enterprise Software v6.2.12 includes the following Redis modules:

- [RediSearch v2.4.9]()
- [RedisJSON v2.0.11]()
- [RedisBloom v2.2.17](release-notes/)
- [RedisGraph v2.8.15]()
- [RedisTimeSeries v1.6.16]()

For help upgrading a module, see [Add a module to a cluster](#upgrading-the-module-for-the-database).

title: Interface enhancements

text:
- Allow creation and editing of sharded databases with a single shard.  This lets you prepare for future scaling by ensuring your apps work in clustering mode, regardless of the actual number of configured shards
- Enhanced the slowlog in the UI to display unprintable characters in RESTORE commands
- Added support for custom paths when bootstrapping the cluster via the UI
- Improve readability of geo-distributed log entries in the UI

title: Additional enhancements

text:
- Added support for the MODULE LIST command on Active-Active databases
- Enhanced validity checks of the input parameters of the CRDB-CLI tool

title: Resolved issues

text:
- RS38320 A failed task leaves the nodes list outdated in the UI
- RS73768, RS72082 Increased certificate rotation timeout to allow it to finish
- RS72466, RS68668 Fix false positive alerts for certification expiration
- RS69256 Change pre-bootstrap default TLS version to 1.2
- RS67133 Fixed replication for command RESTOREMODAUX
- RS66468 Fixed "Test regex keys" in the UI
- RS58156 Fixed the installation to abort and alert when encountering issues in NTP
- RS67935 Fixed releasing 30MB of memory when deleting an Active-Active database
- RS64276 Fixed high memory consumption of the DMC output buffers when running CLIENT LIST

title: Known limitations

text:
- RS81463 A shard may crash when resharding an Active-Active database with Auto Tiering . Specifically, the shard will crash when volatile keys or Active-Active tombstone keys reside in Flash memory.

- RS54131 Returning +OK reply from the QUIT command on a TLS enabled database

- RS40641 - API requests are redirected to an internal IP in case the request arrives from a node which is not the master. To avoid this issue, use [`rladmin cluster config`]() to configure `handle_redirects` or `handle_metrics_redirects`.

title: Installation limitations

text:
Several Redis Enterprise Software installation reference files are installed to the directory `/etc/opt/redislabs/` even if you use [custom installation directories]().

As a workaround to install Redis Enterprise Software without using any root directories, do the following before installing Redis Enterprise Software:

1. Create all custom, non-root directories you want to use with Redis Enterprise Software.

1. Mount `/etc/opt/redislabs` to one of the custom, non-root directories.

title: Security

text:
As part of Redis commitment to security, Redis Enterprise Software implements the latest [security fixes](https://github.com/redis/redis/releases) available with open source Redis. The following [Open Source Redis](https://github.com/redis/redis) [CVEs](https://github.com/redis/redis/security/advisories) do not affect Redis Enterprise:

- [CVE-2022-24834](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24834) - Redis Enterprise versions 6.2.12 and later are not impacted by the CVE that was found and fixed in open source Redis. A fix to prevent Lua scripts from causing heap overflow was implemented in Redis Enterprise version 6.2.12. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 7.0.12, Redis 6.2.13, Redis 6.0.20)

- [CVE-2021-32625](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32625) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis since Redis Enterprise does not implement LCS. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.4, Redis 6.0.14)

- [CVE-2021-32672](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32672) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the LUA debugger is unsupported in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-32675](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32675) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proxy in Redis Enterprise does not forward unauthenticated requests. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-32762](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32762) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the memory allocator used in Redis Enterprise is not vulnerable. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-41099](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41099) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proto-max-bulk-len CONFIG is blocked in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16) security fixes for [recent CVEs](https://github.com/redis/redis/security/advisories).

Redis Enterprise has already included the fixes for the relevant CVEs. Some CVEs announced for open source Redis do not affect Redis Enterprise due to different and additional functionality available in Redis Enterprise that is not available in open source Redis.


summary: New script to generate new self-signed certificates for renewal. Improved logs. Deactivate alert_mgr using rladmin.

title: Redis Enterprise Software release notes 6.2.18-70 (January 2023)

summary: Added To field to test email server alerts. New flag to skip cluster resource validation during imports. Improved error messages.

title: Redis Enterprise Software release notes 6.2.18-65 (December 2022)

summary: UI support for custom REST API port. Added info level for troubleshooting redis_mgr.

title: Redis Enterprise Software release notes 6.2.18-58 (November 2022)

summary: New REST API endpoint to check whether a node is a primary or a replica. Added metrics to track certificate expiration time.

title: Redis Enterprise Software release notes 6.2.18-49 (October 2022)

summary: Database auditing. Private key encryption. Active-Active database support for MEMORY USAGE command. Improvements to crdb-cli.

title: Redis Enterprise Software release notes 6.2.18-43 (September 2022)

title: Overview

text:
[Redis Enterprise Software version 6.2.18](https://redislabs.com/redis-enterprise-software/download-center/software/) is now available!

This version of Redis Enterprise Software offers:

- RedisJSON on Active-Active General Availability
- Database connection auditing
- Private key encryption
- Active-Active support for `memory usage` command
- `crdb-cli` improvements
- Compatibility with open source Redis v6.2.6
- Additional enhancements and fixes

title: Detailed release notes

text: For more detailed release notes, select a build version from the following table:

title: Deprecations

title: Active-Active database persistence

text:
The snapshot option for [data persistence on Active-Active databases](manage/#data-persistence) will be deprecated in a future version of Redis Enterprise Software. If you have an Active-Active database using snapshot persistence, switch to AOF persistence. Use `crdb-cli` to do so:
[code example]

title: TLS 1.0 and TLS 1.1

text:
TLS 1.0 and TLS 1.1 connections are considered deprecated in favor of TLS 1.2 or later.

Please verify that all clients, apps, and connections support TLS 1.2.  Support for the earlier protocols will be removed in a future release.

Certain operating systems, such as RHEL 8, have removed support for the earlier protocols. Redis Enterprise Software does not support connection protocols that are not supported by the underlying operating system.

title: 3DES encryption cipher

text:
The 3DES encryption cipher is considered deprecated in favor of stronger ciphers like AES.

Please verify that all clients, apps, and connections support the AES cipher. Support for 3DES will be removed in a future release.

Certain operating systems, such as RHEL 8, have already removed support for 3DES. Redis Enterprise Software cannot support cipher suites that are not supported by the underlying operating system.

title: Known limitations

title: Feature limitations

text:
- RS54131 Running the `QUIT` command on a TLS connected database closes connection and does not return a `+OK` reply

- An intermittent issue can occur where a CRDB process becomes stuck in a restart loop. If this issue occurs while upgrading to Redis Enterprise Software version 6.2.18, please upgrade to the latest version [6.4.2-69]() or [contact support](https://redis.com/company/support/).

- RS40641 - API requests are redirected to an internal IP in case the request arrives from a node which is not the master. To avoid this issue, use [`rladmin cluster config`]() to configure `handle_redirects` or `handle_metrics_redirects`.

- RS51144, RS102128 - Active-Active: To start successfully, the syncer (`crdt-syncer`) must connect to all sources. In multi-cluster configurations (more than 2 A-A clusters participating), in some cases, if one or more of the clusters is not available, A-A replication will be down.

title: Installation limitations

title: Upgrade limitations

text:
Before you upgrade a cluster that hosts Active-Active databases with modules to v6.2.18, perform the following steps:

1. Use `crdb-cli` to verify that the modules (`modules`) and their versions (in `module_list`) are as they appear in the database configuration and in the default database configuration:

    [code example]

1. From the admin console's **redis modules** tab, validate that these modules with their specific versions are loaded to the cluster.

1. If one or more of the modules/versions are missing or if you need help, [contact Redis support](https://redis.com/company/support/) before taking additional steps.

code: crdb-cli crdb update --crdb-guid <CRDB_GUID> --default-db-config '{"data_persistence": "aof", "aof_policy":"appendfsync-every-sec"}'

section_id: active-active-database-persistence

code: crdb-cli crdb get --crdb-guid <crdb-guid>

section_id: upgrade-limitations


title: Overview

text:
[Redis Enterprise Software version 6.2.18](https://redislabs.com/redis-enterprise-software/download-center/software/) is now available!

This version of Redis Enterprise Software offers:

- RedisJSON on Active-Active General Availability
- Database connection auditing
- Private key encryption
- Active-Active support for `memory usage` command
- `crdb-cli` improvements
- Compatibility with open source Redis v6.2.6
- Additional enhancements and fixes

The following table shows the MD5 checksums for the available packages:

| Package | MD5 checksum (6.2.18-43 September release) |
|:--------|:-------------|
| Ubuntu 16 | `055973eb7009073b0c199ec1dfd81018` |
| Ubuntu 18 | `8c37c6ae10b0ae4956e3c11db80d18ce` |
| RedHat Enterprise Linux (RHEL) 7
Oracle Enterprise Linux (OL) 7 | `c770a66d9bfdd8734f1208d64aa67784` |
| RedHat Enterprise Linux (RHEL) 8
Oracle Enterprise Linux (OL) 8 | `85eb6339f837205d83f215e32c1d028f` |

title: New features and enhancements

text:
#### General Availability of Active-Active databases with RedisJSON

Active-Active databases now support Index, query, and full-text search of nested JSON documents when combining RedisJSON with RediSearch.

#### Database connection auditing

You can now [audit database connection]() and authentication events to track and troubleshoot activity.  Administrators can now use third-party systems to track and analyze connection events in realtime.

#### Private key encryption

When enabled, private key encryption encrypts private keys stored in the cluster configuration store (CCS).  Private keys are encrypted using a secure, self-contained internal process.  Databases must be at least version 6.2.2 or later to use this feature.

#### Active-Active support for MEMORY USAGE command

Redis Enterprise Active-Active databases now support the [MEMORY USAGE]() command, which simplifies troubleshooting and lets applications detect anomalous behavior and dangerous trends.
To learn more, see  [`Active-Active with RedisJSON`]().

MEMORY USAGE reports the RAM memory use, in bytes, of a key and its value.  The result includes the memory allocated for the data value and the administrative overhead associated with the key.

#### `crdb-cli` improvements

The `crdb-cli` utility used to manage Active-Active databases now allows greater visibility into management operations to make it easier to investigate and troubleshoot problems. You can now use:

- `crdb-cli task list` to retrieve details about current and previous tasks for all Active-Active databases on a cluster

- `crdb-cli task --task-id <task-id>` to get detailed information about a specific task.

To learn more, see [`crdb-cli`]()

#### Redis modules

Redis Enterprise Software v6.2.18-43 (September release) includes the following Redis modules:

- [RediSearch v2.4.11]()
- [RedisJSON v2.2.0]()
- [RedisBloom v2.2.18](release-notes/redisbloom-2.2-release-notes/#v2218-july-2022)
- [RedisGraph v2.8.17]()
- [RedisTimeSeries v1.6.17]()

See [Upgrade modules]() to learn how to upgrade a module for a database.

#### Additional enhancements

- Added support for the MODULE LIST command on Active-Active databases
- Enhanced validity checks of the input parameters of the CRDB-CLI tool
- The Syncer lag calculation has been improved and fixes multiple miscalculations
- Support package includes additional information for Active-Active databases
- Added the ability to retrieve the syncer mode (centralized / distributed) by running

    `rladmin info db [{db:<id> | <name>}]`

    To learn more, see [Distributed sychronization]()

title: Version changes

title: Breaking changes

text:
RS84006 - When using the REST API to create a database, this specific set of conditions can lead to an error:

- sharding is enabled
- oss_sharding and implicit_shard_key are both deactivated
- A shard_key_regex is _not_ defined

If this occurs, the database endpoint returns `(error) ERR key "test" does not match any rule`.

To address this issue, do one of the following:

- Explicitly define shard_key_regex
- Enable oss_sharding or implicit_shard_key (enabling both also works)

title: Prerequisites and notes

text:
-  You can [upgrade to v6.2.18]() from Redis Enterprise Software v6.0 and later.

- Refer to [v6.2.4 release notes]() for important notes regarding changes made to the upgrade policy and how those changes might impact your experience.

- Upgrades from versions earlier than v6.0 are not supported.

- If you plan to upgrade your cluster to RHEL 8, see the [v6.2.8 release notes]() for known limitations.

title: Deprecations

text:
#### Active-Active database persistence

The snapshot option for [data persistence on Active-Active databases](manage/#data-persistence) will be deprecated in a future version of Redis Enterprise Software.  If you have an Active-Active database using snapshot persistence, we strongly encourage you to switch to AOF persistence.  Use `crdb-cli` to do so:
[code example]

#### TLS 1.0 and TLS 1.1

TLS 1.0 and TLS 1.1 connections are considered deprecated in favor of TLS 1.2 or later.

Please verify that all clients, apps, and connections support TLS 1.2.  Support for the earlier protocols will be removed in a future release.

Certain operating systems, such as RHEL 8, have already removed support for the earlier protocols.  Redis Enterprise Software cannot support connection protocols that are not supported by the underlying operating system.

#### 3DES encryption cipher

The 3DES encryption cipher is considered deprecated in favor of stronger ciphers like AES.

Please verify that all clients, apps, and connections support the AES cipher. Support for 3DES will be removed in a future release.

Certain operating systems, such as RHEL 8, have already removed support for 3DES. Redis Enterprise Software cannot support cipher suites that are not supported by the underlying operating system.

title: Product lifecycle updates

text:
Redis Enterprise Software v6.0.x reached end-of-life (EOL) on May 31, 2022.

EOL of Redis Enterprise Software 6.2.x was reset to occur 18 months after the release of version 6.4, in accordance with the updated EOL policy.  The new EOL date is August 31, 2024.

To learn more, see the Redis Enterprise Software [product lifecycle](), which details the release number and the end-of-life schedule for Redis Enterprise Software.

For Redis modules information and lifecycle, see [Module lifecycle]().

title: Resolved issues

text:
- RS64002 - Fixes email alerts for LDAP mappings.
- RS79519 - fixes a bug that prevented Administrators from editing an Active-Active database using the API with username instead of email as their identifier.
- RS78039 - fixes a bug that caused the sync between two shards to pause when resetting a shard's data which can be when performing full sync or importing an RDB.
- RS73454 - Updates internal timeouts to enable faster resharding.
- RS75783 - Fixes failover due to false identification of dead nodes when master node goes down.
- RS75206, RS52686 - Fixes backup_interval_offset in case where the user chose an offset that is higher than backup_interval; Fixes the UI from resetting backup_interval_offset after manual DB configuration.
- RS75176 - Fixes rare case of stuck state machine during "maintenance off".
- RS57200 - Add an IP address to "failed_authentication_attempt" errors.
- RS56615 - Changed rladmin tune db db_name max_aof_load_time to receive the value in seconds; Added max_aof_load_time option to rladmin help tune.
- RS54745 - Fixes the Rest API to reject BDB creation using negative integers as a uid.
- RS46092 - Fixes rlcheck failure when somaxconn policy is a value other than 1024.
- RS68965, RS80615 - Adds internode encryption ports 3340-3344 to rlcheck connectivity.
- RS63302 - Adds umask validation for root user when installing.
- RS46947 - Fixes removal of old installations in install.sh.

title: Known limitations

title: Feature limitations

text:
- RS81463 A shard might crash when resharding an Active-Active database with Auto Tiering . Specifically, the shard will crash when volatile keys or Active-Active tombstone keys reside in Flash memory.

- RS54131 Running the `QUIT` command on a TLS connected database closes connection and does not return a `+OK` reply

title: Upgrade limitations

title: Security

text:
#### Open source Redis security fixes compatibility

As part of Redis's commitment to security, Redis Enterprise Software implements the latest [security fixes](https://github.com/redis/redis/releases) available with open source Redis. The following [Open Source Redis](https://github.com/redis/redis) [CVEs](https://github.com/redis/redis/security/advisories) do not affect Redis Enterprise:

- [CVE-2021-32625](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32625) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis since Redis Enterprise does not implement LCS. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.4, Redis 6.0.14)

- [CVE-2021-32672](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32672) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the LUA debugger is unsupported in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-32675](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32675) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proxy in Redis Enterprise does not forward unauthenticated requests. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-32762](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32762) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the memory allocator used in Redis Enterprise is not vulnerable. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-41099](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41099) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proto-max-bulk-len CONFIG is blocked in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16) security fixes for [recent CVEs](https://github.com/redis/redis/security/advisories). Redis Enterprise has already included the fixes for the relevant CVEs. Some CVEs announced for Open Source Redis do not affect Redis Enterprise due to different and additional functionality available in Redis Enterprise that is not available in Open Source Redis.

section_id: deprecations


title: Overview

text:
This is a maintenance release for [Redis Enterprise Software version 6.2.18](https://redis.io/downloads/#software).

The following table shows the MD5 checksums for the available packages:

| Package | MD5 checksum (6.2.18-49 October release) |
|:--------|:-------------|
| Ubuntu 16 | `89029a28a2b0e3ad379559b94d00ae32` |
| Ubuntu 18 | `830e8704c0f6902a04df9ff53cc5e41f` |
| RedHat Enterprise Linux (RHEL) 7
Oracle Enterprise Linux (OL) 7 | `766d2f8448fc28d0ea67cac20387a9e3` |
| RedHat Enterprise Linux (RHEL) 8
Oracle Enterprise Linux (OL) 8 | `7e31fb3e3416b404513dad508669f836` |

title: New features and enhancements

text:
- The [`/nodes/status`]() REST API endpoint indicates whether a node is the primary.  (RS82566)
- Added metrics to track certificates expiration time (RS56040)

#### Redis modules

Redis Enterprise Software v6.2.18-49 (October release) includes the following Redis modules:

- [RediSearch v2.4.11]()
- [RedisJSON v2.2.0]()
- [RedisBloom v2.2.18](release-notes/redisbloom-2.2-release-notes/#v2218-july-2022)
- [RedisGraph v2.8.17]()
- [RedisTimeSeries v1.6.17]()

See [Upgrade modules]() to learn how to upgrade a module for a database.

title: Known upgrade limitations

section_id: known-upgrade-limitations


title: Overview

text:
This is a maintenance release for [Redis Enterprise Software version 6.2.18](https://redis.io/downloads/#software).

The following table shows the MD5 checksums for the available packages:

| Package | MD5 checksum (6.2.18-58 November release) |
|:--------|:-------------|
| Ubuntu 16 | `38d974c47004df0808b71c2bd5a96996` |
| Ubuntu 18 | `6a5ca7a287f1808a50d13312162aac4b` |
| RedHat Enterprise Linux (RHEL) 7
Oracle Enterprise Linux (OL) 7 | `d8283a3475a70823641249e3cfe3ab6e` |
| RedHat Enterprise Linux (RHEL) 8
Oracle Enterprise Linux (OL) 8 | `040e45c866fde391b35ae85d648a4afa` |

title: New features and enhancements

text:
- Added support to the UI to work with custom REST API port (RS84428)
- Added info level print to redis_mgr for troubleshooting (RS85385)

#### Redis modules

Redis Enterprise Software v6.2.18-58 (November release) includes newer versions of the following Redis modules:

- [RediSearch v2.4.14]()
- [RedisGraph v2.8.19]()

See [Upgrade modules]() to learn how to upgrade a module for a database.

title: Resolved issues

text:
- RS85369 - Fixes umask validation during installation to allow for temporary umask change
- RS77339 - Fixes the "FROM" email addresses of email alerts
- RS86005 - Fixes  `bdbs/<int:uid>/actions/recover` API to return the bdb status and not the `recovery_plan`

title: Known upgrade limitations


title: Overview

text:
This is a maintenance release for [Redis Enterprise Software version 6.2.18](https://redis.io/downloads/#software).

The following table shows the MD5 checksums for the available packages:

| Package | MD5 checksum (6.2.18-65 December release) |
|:--------|:-------------|
| Ubuntu 16 | `515c7bbc97eaf1939757c8894eda9523` |
| Ubuntu 18 | `830e8704c0f6902a04df9ff53cc5e41f` |
| RedHat Enterprise Linux (RHEL) 7
Oracle Enterprise Linux (OL) 7 | `b51d13e30f4a7e1a134982342b8865b0` |
| RedHat Enterprise Linux (RHEL) 8
Oracle Enterprise Linux (OL) 8 | `762f907c1f0e6e0e88e4ae5bf967e143` |

title: New features and enhancements

text:
- When setting up an alert email server in the UI: added a `To` field to the `test email server` function (RS86119)
- Added a new flag to skip cluster resource validation when performing import (RS88086)
- Enhanced error message information for connection handling
- Added logging details to `insufficient_resources` planner error

#### Redis modules

Redis Enterprise Software v6.2.18-65 (December release) includes newer versions of the following Redis modules:

- [RediSearch v2.4.16]()
- [RedisGraph v2.8.20]()

See [Upgrade modules]() to learn how to upgrade a module for a database.

title: Resolved issues

text: - RS87191 - Fixes syncer stop due to cross slot violation error in Auto Tiering

title: Known upgrade limitations


title: Overview

text:
This is a maintenance release for [Redis Enterprise Software version 6.2.18](https://redis.io/downloads/#software).

The following table shows the MD5 checksums for the available packages:

| Package | MD5 checksum (6.2.18-70 January release) |
|:--------|:-------------|
| Ubuntu 16 | `69d2d2c71232adb15cebf29308ac54da` |
| Ubuntu 18 | `22e0637107a32ccb96a704abe9650adf` |
| RedHat Enterprise Linux (RHEL) 7
Oracle Enterprise Linux (OL) 7 | `e14fcf6973418602f2b64a55a0bc8374` |
| RedHat Enterprise Linux (RHEL) 8
Oracle Enterprise Linux (OL) 8
Rocky Enterprise Linux | `f61d0d8f0bb5ad90a470482d6575eb27` |

title: New features and enhancements

text:
- Added a new script to generate new self-signed certificates for renewal. For details, see [Certificates]()
- Added `rpm -q` command output to the logs (RS82673)
- Added logs for server operations: `start`, `stop`, `restart` (RS87775)
- Added `alert_mgr` to the [services you can deactivate with `rladmin`]() (RS89572)

title: Resolved issues

text: - RS61062 - Remove leading colon added to `PATH` variable

title: Known upgrade limitations

text:
Before you upgrade a cluster that hosts Active-Active databases with modules to v6.2.18, perform the following steps:

1. Use `crdb-cli` to verify that the modules (`modules`) and their versions (in `module_list`) are as they appear in the database configuration and in the default database configuration:

    [code example]

1. From the admin console's **redis modules** tab, validate that these modules with their specific versions are loaded to the cluster.

1. If one or more of the modules/versions are missing or if you need help, [contact Redis support](https://redis.com/company/support/) before taking additional steps.


title: Redis Enterprise Software Release Notes 6.2.4 (August 2021)

summary: Internode encryption. Nginx replaced by envoy. New upgrade policies/behavior.

title: Overview

text:
[Redis Enterprise Software version 6.2.4](https://redislabs.com/redis-enterprise-software/download-center/software/) is now available!

This version offers:

- Encryption of all communications within cluster nodes
- Security enhancements
- Bug fixes
- Compatibility with the latest version of open source Redis 6.2.3

title: Version changes

title: Prerequisites and notes

text:
You can [upgrade to v6.2.4]() from Redis Enterprise Software v6.0 and later.

Keep the following in mind:

- Upgrades from versions earlier than v6.0 are not supported

- The new internode encryption feature requires port 3342 to be open on all machines in the cluster.

- [In v6.0.20](), Redis Enterprise Software replaced Nginx with envoy to improve internal security and communication.  As of v6.2.4, Nginx is no longer provided with Redis Enterprise Software.

title: Database upgrade default changes

text:
The default behavior of the `upgrade db` command has changed.  It is now controlled by a new cluster policy (`redis_upgrade_policy`), which defines the policy for creating new databases and upgrading existing databases.  The policy supports the following values:

- When set to `major`, the policy allows databases to be created or updated to versions of Redis compatible with open source Redis major releases.  This allows for longer upgrade cycles by supporting Redis versions across multiple Redis Enterprise Software releases.

    This is the default value for Redis Enterprise Software.

- When set to `latest`, the policy creates new databases and upgrades existing ones to be compatible with the latest (most recent) version of open source Redis, which was the default behavior of earlier versions of Redis Enterprise Software.  This is no longer the default behavior.

    Setting the upgrade policy to `latest` ensures that the most recent Redis features are available to new databases and ones that are upgraded.  It also requires more frequent upgrades, as open source Redis is updated more frequently than Redis Enterprise Software.

The Redis Enterprise Software 6.2.4 package includes compatibility with the most recent major Redis release (v6.0) and the latest (most recent) update to Redis (v6.2.3).

By default, compatibility with v6.0 will be installed.  To change this, use `rladmin` to set the upgrade policy and the default Redis version:

[code example]

To learn more, see the [upgrade instructions]().

title: Product lifecycle updates

text:
Redis Enterprise Software v5.6.0 will reach end of life (EOF) on October 31, 2021.

To learn more, see the Redis Enterprise Software [product lifecycle](), which details the release number and the end-of-life schedule for Redis Enterprise Software.

Redis Enterprise modules have individual release numbers [and lifecycles]().

title: Deprecation notices

text:
- [In v6.0.20](), the SASL-based LDAP mechanism was deprecated in favor of a new [RBAC-based approach]().  As of v6.2.12, support for the older mechanism has been removed.

    For help migrating to the LDAP-based mechanism, see [Migrate to role-based LDAP]().

- [OpenStack Object Storage](https://wiki.openstack.org/wiki/Swift) ("Swift") has reached end-of-life.  Consequently, you can no longer use ObjectStack Swift as a target for database backup or export operations.

title: Features and enhancements

title: Internode encryption

text:
Internode encryption (INE) encrypts all communication between nodes in a cluster; it is available for the control plane and the data plane.

#### Control plane internode encryption

Control plane internode encryption encrypts all management communication within a cluster.  It is enabled by default for all new clusters and upgraded clusters.

#### Data plane internode encryption

Data plane internode encryption encrypts communication between nodes within a cluster, such as database replication between nodes.

Data plane internode encryption is available for new or fully upgraded clusters.  It is not enabled by default.

You can enable data plane internode encryption by:

- Setting the cluster policy to enable data plane internode encryption by default for new databases

    [code example]

- Enabling it for individual existing databases

    [code example]

title: Internal certificate management

text:
Internode encryption relies on internal certificates signed by a unique, private CA certificate created for your deployment.  The private CA generates and signs leaf certificates for internode encryption only.  It's generated when you install or upgrade to Redis Enterprise 6.2.4.  It's used only within the cluster and is not exposed outside of the cluster.

The leaf certificates expire regularly; they're automatically rotated before expiration and alerts are issued as needed.

title: Open source Redis compatibility

text:
[Redis 6.2](https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES) introduced new commands, feature improvements, and security fixes; it addresses many customer requests.

Redis Enterprise Software supports all new commands, except [RESET]() and [FAILOVER](.  (Redis Enterprise takes a different approach to connectivity; it also separates control plane operations from data plane operations.)

To learn more, see Redis Enterprise Software [compatibility with open source]().

title: Redis modules

text:
Redis Enterprise Software v6.2.4 includes the following Redis modules:

- [RediSearch v2.0.11]()
- [RedisJSON v1.0.8]()
- [RedisBloom v2.2.6]()
- [RedisGraph v2.4.7]()
- [RedisTimeSeries v1.4.10]()

title: Internode encryption for modules

text:
To utilize data plane encryption for existing databases with modules, update the module to the latest version prior to enabling data plane encryption.

For help, see [Upgrade the module for a database]().

title: Module-related enhancements

text:
Added the capability to update current module arguments for an existing database.
In earlier versions, you could do this only when upgrading a module.
To learn more, see [`rladmin upgrade`]().

title: Resolved issues

text:
- RS39954 - Changed the UI status indication for the
[default user]() from `Active/Inactive` to `Enabled/Disabled`

- RS42626 - Increased the max length for modules commands from 23 characters to 64 characters

- RS54732 - Fixed incorrect reporting of number database connections, which caused the number of connections to be reported as a 20 digit number

- RS52265 - Fixed excessive log lines reporting when an Active-Active database is on featureset `0`. [Upgrade the featureset]() version to the latest.

- RS56122 - Fixed a bug that was causing AOF files to grow when the replicas of two Active-Active databases became disconnected during full synchronization

- RS58184 - Fixed a bug when trying to create an Active-Active database with expired syncer certificates; participating clusters were creating replicas even though the create operation failed.

- RS48988 - Add the username description in the log upon an unauthorized REST API request

title: Known limitations

title: Installation limitations

text:
Several Redis Enterprise Software installation reference files are installed to the directory `/etc/opt/redislabs/` even if you use [custom installation directories]().

As a workaround to install Redis Enterprise Software without using any root directories, do the following before installing Redis Enterprise Software:

1. Create all custom, non-root directories you want to use with Redis Enterprise Software.

1. Mount `/etc/opt/redislabs` to one of the custom, non-root directories.

title: Known issues

text:
- A new command was added as part of Redis 6.2: [`XAUTOCLAIM`](). When used in an Active-Active configuration, this command may cause Redis shards to crash, potentially resulting in data loss. The issue is fixed in Redis Enterprise Software version 6.2.12. Additionally, we recommend enabling AOF persistence for all Active-Active configurations.

- The `ZRANGESTORE` command, with a special `zset-max-ziplist-entries` configuration can crash Redis 6.2. See [Redis repository 10767](https://github.com/redis/redis/pull/10767) for more details.

- RS81463 - A shard may crash when resharding an Active-Active database with Auto Tiering . Specifically, the shard will crash when volatile keys or Active-Active tombstone keys reside in Flash memory.

- RS40641 - API requests are redirected to an internal IP in case the request arrives from a node which is not the master. To avoid this issue, use [`rladmin cluster config`]() to configure `handle_redirects` or `handle_metrics_redirects`.

title: Security

text:
-   The following [Open Source Redis](https://github.com/redis/redis) [CVE's](https://github.com/redis/redis/security/advisories) do not affect Redis Enterprise:

    -   [CVE-2021-32625](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32625) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis since Redis Enterprise does not implement `LCS`. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.4, Redis 6.0.14)

    -   [CVE-2021-32672](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32672) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the LUA debugger is unsupported in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

    -   [CVE-2021-32675](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32675) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proxy in Redis Enterprise does not forward unauthenticated requests. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

    -   [CVE-2021-32762](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32762) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the memory allocator used in Redis Enterprise is not vulnerable. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

    -   [CVE-2021-41099](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41099) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proto-max-bulk-len CONFIG is blocked in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

code:
$ rladmin tune cluster redis_upgrade_policy latest
$ rladmin tune cluster default_redis_version 6.2

section_id: database-upgrade-default-changes

code: rladmin tune cluster data_internode_encryption enabled

section_id: internode-encryption

code: rladmin tune db <db:id | name> data_internode_encryption enabled


title: Redis Enterprise Software Release Notes 6.2.8 (October 2021)

summary: RHEL 8 support. Set backup start time.

title: Overview

text: [Redis Enterprise Software version 6.2.8](https://redislabs.com/redis-enterprise-software/download-center/software/) is now available!

title: Features and enhancements

text:
This version features:

- Support for Red Hat Linux Edition (RHEL) 8
- You can now set the start time for [12- and 24-hour backups]()
- Compatibility with version of [open source Redis 6.2.3](https://github.com/redis/redis/releases/tag/6.2.3) (starting with [Redis Enterprise Software v6.2.4]())
- Compatibility with the security fixes of the latest [open source Redis 6.2.6](https://github.com/redis/redis/releases/tag/6.2.6)
- Enhancements and bug fixes

title: Version changes

title: Prerequisites and notes

text:
- You can [upgrade to v6.2.8]() from Redis Enterprise Software v6.0 and later.

- Refer to the [v6.2.4 release notes]() for important notes regarding the upgrade process.

- When upgrading a cluster from Redis Enterprise 6.0.8 and earlier to 6.2.8 only, the DMC proxy might crash when proxy certificates contain additional text as comments.  Redis removes these comments during upgrade, but a change to the v6.2.8 internal upgrade action sequence might cause this problem.

    If you plan to upgrade from a pre-6.0.8 release to 6.2.8, check whether your proxy certificate includes additional comments and manually remove them.  The change was reverted in 6.2.10.

- Upgrades from versions earlier than v6.0 are not supported.

title: Product lifecycle updates

text:
As of 31 October 2021, Redis Enterprise Software v5.6.0 is end of life (EOF).

To learn more, see the Redis Enterprise Software [product lifecycle](), which details the release number and the end-of-life schedule for Redis Enterprise Software.

Redis Enterprise modules have individual release numbers [and lifecycles]().

title: Redis modules

text:
Redis Enterprise Software v6.2.8 includes the following Redis modules:

- [RediSearch v2.0.11]()
- [RedisJSON v1.0.8]()
- [RedisBloom v2.2.6]()
- [RedisGraph v2.4.7]()
- [RedisTimeSeries v1.4.10]()

To learn more, see [Upgrade the module for a database]().

title: Resolved issues

title: User interface fixes

text:
- RS58804 - Display an error message in case of a login attempt with an LDAP user
- RS56680 - Notify that SASLAUTHD should be disabled prior to enabling LDAP
- RS55844 - Use the correct password and mask it on LDAP password update
- RS60877 - Fixed reset of Active-Active database compression level, in cases where the compression level wasn’t set to default, when changing any other configuration via the DB configuration page
- RS43999 - Fixed UI database configuration to allow changes when SFTP SSH key is customized
- RS59861 - Fixed the UI to display an explanation error message when password complexity does not meet requirements
- RS57734 - Fixed inaccessible UI after cluster upgrade due to missing certificate
- RS43041 - Mask secret keys for backup destination for view and edit in the UI

title: Additional fixes

text:
- RS60068 / RS59146 - Fixed unresolved endpoint due to PDNS issues
- RS52812 - Expand API wrapper to return API 405 errors as JSON/XML
- RS57666 - Fixed false shard migration message when the shard fails to bind the port
- RS57444, RS55294, RS4903 - Fixed false "backup finished successfully" message when the backup failed due to restricted access to the backup destination

title: Fixes on build #53

text:
- RS67829 - Fixed a bug that caused Modules' auxiliary field not to get replicated between the primary and the replica shards. Applicable for RediSearch, RedisGraph and RedisGears and happening only at following scenarios:
         - (A) On the destination databases of a Replica Of upon a full sync operation
         - (B) Upon import operation

title: Known limitations

text:
-RS81463 - A shard may crash when resharding an Active-Active database with Auto Tiering . Specifically, the shard will crash when volatile keys or Active-Active tombstone keys reside in Flash memory.

- RS63258 - Redis Enterprise Software 6.2.8 is not supported on RHEL 8 with FIPS enabled.

    FIPS changes system-generated keys, which can limit secure access to the cluster or the admin console via port 8443.

- RS63375 - RHEL 7 clusters cannot be directly upgraded to RHEL 8 when hosting databases using modules.

    Due to binary differences in modules between the two operating systems, you cannot directly update RHEL 7 clusters to RHEL 8 when those clusters host databases using modules.  Instead, you need to create a new cluster on RHEL 8 and then migrate existing data from your RHEL 7 cluster. This does not apply to clusters that do not use modules.

All [known limitations]() from v6.2.4 have been fixed.

title: Installation limitations

title: Known issues

text:
- A new command was added as part of Redis 6.2: [`XAUTOCLAIM`](). When used in an Active-Active configuration, this command may cause Redis shards to crash, potentially resulting in data loss. The issue is fixed in Redis Enterprise Software version 6.2.12. Additionally, we recommend enabling AOF persistence for all Active-Active configurations.

- The `ZRANGESTORE` command, with a special `zset-max-ziplist-entries` configuration can crash Redis 6.2. See [Redis repository 10767](https://github.com/redis/redis/pull/10767) for more details.

- RS40641 - API requests are redirected to an internal IP in case the request arrives from a node which is not the master. To avoid this issue, use [`rladmin cluster config`]() to configure `handle_redirects` or `handle_metrics_redirects`.

title: Security

title: Open source Redis security fix compatibility

text:
As part of its commitment to security, Redis Enterprise Software implements the latest [security fixes](https://github.com/redis/redis/releases) available with open source Redis.

The following [open source Redis](https://github.com/redis/redis) [CVEs](https://github.com/redis/redis/security/advisories) do not affect Redis Enterprise:

- [CVE-2021-32625](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32625) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis since Redis Enterprise does not implement `LCS`. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.4, Redis 6.0.14)

- [CVE-2021-32672](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32672) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the LUA debugger is unsupported in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-32675](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32675) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proxy in Redis Enterprise does not forward unauthenticated requests. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-32762](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32762) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the memory allocator used in Redis Enterprise is not vulnerable. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

- [CVE-2021-41099](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41099) - Redis Enterprise is not impacted by the CVE that was found and fixed in open source Redis because the proto-max-bulk-len CONFIG is blocked in Redis Enterprise. Additional information about the open source Redis fix is on [the Redis GitHub page](https://github.com/redis/redis/releases) (Redis 6.2.6, Redis 6.0.16)

Some CVEs announced for Open Source Redis do not affect Redis Enterprise due to functionality that is either different from (or not available in) open source Redis.