Valkey 9.1.1 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK…
Valkey 9.0.5 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK…
Valkey 8.1.9 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK…
Valkey 8.0.10 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to crash the server using CLIENT KILL (#4234) CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consu…
Valkey 7.2.14 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK…
Upgrade urgency SECURITY: This release supersedes 8.0.8 (revoked) and includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
Upgrade urgency LOW: This is the first release candidate of Valkey 9.1.0, with new features, performance improvements, and bug fixes. New Features and enhanced behavior Database-level access control by @dvkashapov (#2309) Move Lua scripting engine into a Valkey module by @rjd15372 (#2858) Support cross node consistency for SCAN commands through configurable DB hash seed by @sarthakaggarwal97 (#260…
Upgrade urgency LOW: This is the second release candidate of Valkey 9.1.0. Behavior Changes Revert strict TLS certificate validation at config load as it is a breaking change, deferred to next major version (#3572) New Features and enhanced behavior Do the failover immediately if the replica is the best ranked replica by @enjoy-binbin (#2227) Add cluster-config-save-behavior option to control node…
Upgrade urgency HIGH: There is a critical bug that may affect a subset of users. Bug fixes Fix ZDIFF algorithm 2 memory leak on early exit (#3342) Strictly check CRLF when parsing querybuf (#2872) Fix incorrect memory overhead calculation for watched keys (#3359) Fix valkey-cli --cluster del-node for unreachable nodes (#3209) Fix race condition during async client freeing with IO threading enabled…
Upgrade urgency LOW: This is the first stable release of Valkey 9.1. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution New Features and enhanced behavior Add cluster bus network traffic usage metric in bytes by @hpatro (#3396)…
NOTICE: This release has been revoked. The 8.0.8 tag was placed on a commit that is not part of the 8.0 release branch. Users should upgrade to 8.0.9 instead.
Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
Valkey 9.0.3 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-67733) RESP Protocol Injection via Lua error_reply (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message (CVE-2026-27623) Reset request type after handling empty requests Bug fixes Avoids crash during MODULE UNLOAD when ACL rules reference…