On Thu, Mar 21, 2024 at 1:28 PM Neal Gompa <ngompa13(a)gmail.com> wrote:
On Thu, Mar 21, 2024 at 2:24 PM Scott Williams
<vwfoxguru(a)gmail.com>
wrote:
>
> > If we have some clue that a v7 merge/release
> > is on the very near horizon for KeyDB
>
> This doesn't look promising for v7 in time for Fedora 40 or shortly
after, unfortunately:
https://github.com/Snapchat/KeyDB/issues/420
>
> The choice of shipping an ever-stale v7 database versus a maintainable
v6 one is not a fun one, but leaving it up to Fedora package maintainers to
have to potentially come up with their own out-of-band patches for CVEs for
redis-7 seems like the worse choice to me.
I think the immediate fix is pulling in redict once it makes its first
release:
https://codeberg.org/redict/redict
I very much think we should take a wait and see approach for now. KeyDB,
while slow, has at least published something. redict is totally unknown.
Maybe it gets a huge following, maybe it doesn't.
We don't have to make any rash decisions since the current versions of
redis are in good shape for the time being.
--
Jonathan Wright
AlmaLinux Foundation
Mattermost: chat <
https://chat.almalinux.org/almalinux/messages/@jonathan>