Valkey 9.2.0-rc2 - Released Wed 04 November 2026 Upgrade urgency LOW: This is the second release candidate of Valkey 9.2.0. New Features and Enhanced Behavior Add new DELEX command to conditionally delete a string key when its value matches (IFEQ) or differs from (IFNE) a given value by @lightsigma96 (#4607) Add Zstd as a streaming compression codec for RDB persistence and replication, offering be…
Valkey 9.0.7 - Released Mon 26 October 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to potentially execute arbitrary code by publishing an oversized message by @roshkhatri (#5030) Bug Fixes…
Valkey 8.0.12 - Released Mon 26 October 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to potentially execute arbitrary code by publishing an oversized message by @roshkhatri (#5030) Bug Fixe…
Valkey 8.1.11 - Released Mon 26 October 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to potentially execute arbitrary code by publishing an oversized message by @roshkhatri (#5030) Bug Fixe…
Valkey 9.1.3 - Released Mon 26 October 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to potentially execute arbitrary code by publishing an oversized message by @roshkhatri (#5030) Bug Fixes…
Valkey 7.2.15 - Released Mon 26 October 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-f4q9-j22m-xqq9: Fix a heap buffer overflow in cluster Pub/Sub message construction that could allow an authenticated client to crash the server or potentially execute arbitrary code by publishing an oversized message by @roshkha…
Valkey 9.2.0-rc1 - Released Wed 16 September 2026 Upgrade urgency LOW: This is the first release candidate of Valkey 9.2.0. Behavior Changes Active expiration of keys and hash fields now increments the dirty counter, so save points (and thus BGSAVE) may trigger more often by @enjoy-binbin (#3118) New Features and Enhanced Behavior Add ACL DIGEST command that returns a fingerprint of the ACL rules…
Valkey 9.0.6 - Released Tue 01 September 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#45…
Valkey 9.1.2 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#4534)…
Valkey 8.1.10 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#4534…
Valkey 8.0.11 - Released Mon 31 August 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes GHSA-jcj7-v34w-v9vv: Fix a use-after-free in RDMA connection handling that could allow an authenticated client to crash the server using CLIENT KILL. Only affects servers built with USE_RDMA and configured with an RDMA listener (#4534…
Valkey 9.1.1 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK…
Valkey 9.0.5 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK…
Valkey 8.1.9 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK…
Valkey 8.0.10 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to crash the server using CLIENT KILL (#4234) CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK across consu…
Valkey 7.2.14 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security Fixes CVE-2026-56684: Fix a use-after-free in TLS connection handling that could allow an authenticated client to achieve remote code execution using CLIENT KILL (#4234) CVE-2026-63639: Reject corrupt stream RDB files containing a shared NACK…
Upgrade urgency SECURITY: This release supersedes 8.0.8 (revoked) and includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
Upgrade urgency LOW: This is the first release candidate of Valkey 9.1.0, with new features, performance improvements, and bug fixes. New Features and enhanced behavior Database-level access control by @dvkashapov (#2309) Move Lua scripting engine into a Valkey module by @rjd15372 (#2858) Support cross node consistency for SCAN commands through configurable DB hash seed by @sarthakaggarwal97 (#260…
Upgrade urgency LOW: This is the second release candidate of Valkey 9.1.0. Behavior Changes Revert strict TLS certificate validation at config load as it is a breaking change, deferred to next major version (#3572) New Features and enhanced behavior Do the failover immediately if the replica is the best ranked replica by @enjoy-binbin (#2227) Add cluster-config-save-behavior option to control node…
Upgrade urgency HIGH: There is a critical bug that may affect a subset of users. Bug fixes Fix ZDIFF algorithm 2 memory leak on early exit (#3342) Strictly check CRLF when parsing querybuf (#2872) Fix incorrect memory overhead calculation for watched keys (#3359) Fix valkey-cli --cluster del-node for unreachable nodes (#3209) Fix race condition during async client freeing with IO threading enabled…
Upgrade urgency LOW: This is the first stable release of Valkey 9.1. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution New Features and enhanced behavior Add cluster bus network traffic usage metric in bytes by @hpatro (#3396)…
NOTICE: This release has been revoked. The 8.0.8 tag was placed on a commit that is not part of the 8.0 release branch. Users should upgrade to 8.0.9 instead.
Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2026-23479) Use-After-Free in unblock client flow (CVE-2026-25243) Invalid Memory Access in RESTORE command (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
Valkey 9.0.3 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Security fixes (CVE-2025-67733) RESP Protocol Injection via Lua error_reply (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message (CVE-2026-27623) Reset request type after handling empty requests Bug fixes Avoids crash during MODULE UNLOAD when ACL rules reference…