On Thu, Mar 21, 2024 at 2:24 PM Scott Williams <vwfoxguru@gmail.com> wrote:
>
> > If we have some clue that a v7 merge/release
> > is on the very near horizon for KeyDB
>
> This doesn't look promising for v7 in time for Fedora 40 or shortly after, unfortunately: https://github.com/Snapchat/KeyDB/issues/420
>
> The choice of shipping an ever-stale v7 database versus a maintainable v6 one is not a fun one, but leaving it up to Fedora package maintainers to have to potentially come up with their own out-of-band patches for CVEs for redis-7 seems like the worse choice to me.
I think the immediate fix is pulling in redict once it makes its first
release: https://codeberg.org/redict/redict
I very much think we should take a wait and see approach for now. KeyDB, while slow, has at least published something. redict is totally unknown. Maybe it gets a huge following, maybe it doesn't.
We don't have to make any rash decisions since the current versions of redis are in good shape for the time being.
--
Jonathan Wright
AlmaLinux Foundation