Valkey 8.1.11 → 9.0.0
1 release · 0 breaking changes · 2 security fixes · 0 advisories fixed
2security0breaking0deprecated0feature7fix
Breaking changes
None in the release notes.
Security changes
- security Fixes CVE-2025-67733: RESP Protocol Injection via Lua error_reply in 9.0.0
- security Fixes CVE-2026-21863: Remote DoS with malformed Valkey Cluster bus message in 9.0.0
Every release in between
securityFixes CVE-2025-67733: RESP Protocol Injection via Lua error_reply
securityFixes CVE-2026-21863: Remote DoS with malformed Valkey Cluster bus message
fixHSETEX with FXX should not create an object if it does not exist (#2716)
fixFix crash when aborting a slot migration while child snapshot is active (#2721)
fixFix double MOVED reply on unblock at failover (#2734)
fixFix memory leak with CLIENT LIST/KILL duplicate filters (#2362)
fixFix incorrect accounting after completed atomic slot migration (#2749)
fixFix Lua VM crash after FUNCTION FLUSH ASYNC + FUNCTION LOAD (#1826, #2750)
fixFix invalid memory address caused by hashtable shrinking during safe iteration (#2753)