Valkey 8.1.2 → 8.1.8
6 releases · 0 breaking changes · 11 security fixes · 2 advisories fixed
11security0breaking0deprecated0feature40fix
Vulnerabilities fixed by this upgrade
- 6.5 CVE-2026-21863 Remote DoS with malformed Valkey Cluster bus message
- 8.5 CVE-2025-67733 RESP Protocol Injection via Lua error_reply
Breaking changes
None in the release notes.
Security changes
- security (CVE-2026-23479) Use-After-Free in unblock client flow in 8.1.7
- security (CVE-2026-25243) Invalid Memory Access in RESTORE command in 8.1.7
- security (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution in 8.1.7
- security (CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message in 8.1.6
- security (CVE-2025-67733) RESP Protocol Injection via Lua error_reply in 8.1.6
- security (CVE-2025-49844) A Lua script may lead to remote code execution in 8.1.4
- security (CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE in 8.1.4
- security (CVE-2025-46818) A Lua script can be executed in the context of another user in 8.1.4
- security (CVE-2025-46819) LUA out-of-bound read in 8.1.4
- security CVE-2025-32023 prevent out-of-bounds write during hyperloglog operations (#2146) in 8.1.3
- security CVE-2025-48367 retry accept on transient errors (#2315) in 8.1.3
Every release in between
fixFix ZDIFF algorithm 2 memory leak on early exit (#3342)
fixStrictly check CRLF when parsing querybuf (#2872)
fixFix incorrect memory overhead calculation for watched keys (#3359)
fixFix valkey-cli --cluster del-node for unreachable nodes (#3209)
fixFix race condition during async client freeing with IO threading enabled (#3458)
fixFix double free in stream consumer PEL loading with corrupt RDB data (#3498)
fixFixes server crash when RDMA benchmark clients disconnect (#3448)
fixFix misleading log "I/O error reading bulk count from PRIMARY: Success" (#3580)
fixHandle NULL pointer in streamTrim listpack delta calculation (#3591)
fixFix Deferred Reply Placeholders in Active Deferred Buffers (#3578)
fixAdd NULL check in updateSSLPendingFlag (#3641)
fixFix heap-use-after-free in ACL LOAD when client free is deferred (#3800)
fixRedacting customer information when hide_user_data_from_log is true in rdb.c, networking.c, debug.c and t_hash (#3872)
fixFix use-after-free in VM_RegisterClusterMessageReceiver (#3846)
fixHarden SENTINEL commands and config rewrite against control-character injection (#3847)
fixFix CLUSTER SLOTS crash when called from module timer callback (#2915)
security(CVE-2026-23479) Use-After-Free in unblock client flow
security(CVE-2026-25243) Invalid Memory Access in RESTORE command
security(CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
security(CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
security(CVE-2025-67733) RESP Protocol Injection via Lua error_reply
fixRestrict ttl from being negative and avoid crash in import-mode (#2944)
fixFix chained replica crash when doing dual channel replication (#2983)
fixFix used_memory_dataset underflow due to miscalculated used_memory_overhead (#3005)
fixFix crashing while MODULE UNLOAD when ACL rules reference a module command or subcommand (#3160)
fixFix server assert on ACL LOAD and resetchannels (#3182)
fixFix bug causing no response flush sometimes when IO threads are busy (#3205)
fixFix Lua VM crash after FUNCTION FLUSH ASYNC + FUNCTION LOAD (#1826)
fixFix invalid memory address caused by hashtable shrinking during safe iteration (#2753)
fixCluster: Avoid usage of light weight messages to nodes with not ready bidirectional links (#2817)
fixSend duplicate multi meet packet only for node which supports it (#2840)
fixFix loading AOF files from future Valkey versions (#2899)
security(CVE-2025-49844) A Lua script may lead to remote code execution
security(CVE-2025-46817) A Lua script may lead to integer overflow and potential RCE
security(CVE-2025-46818) A Lua script can be executed in the context of another user
security(CVE-2025-46819) LUA out-of-bound read
fixFix accounting for dual channel RDB bytes in replication stats (#2614)
fixFix EVAL to report unknown error when empty error table is provided (#2229)
fixFix use-after-free when active expiration triggers hashtable to shrink (#2257)
fixFix MEMORY USAGE to account for embedded keys (#2290)
fixFix memory leak when shrinking a hashtable without entries (#2288)
fixPrevent potential assertion in active defrag handling large allocations (#2353)
fixPrevent bad memory access when NOTOUCH client gets unblocked (#2347)
fixConverge divergent shard-id persisted in nodes.conf to primary's shard id (#2174)
fixFix client tracking memory overhead calculation (#2360)
fixFix RDB load per slot memory pre-allocation when loading from RDB snapshot (#2466)
fixDon't use AVX2 instructions if the CPU doesn't support it (#2571)
fixFix bug where active defrag may be unable to defrag sparsely filled pages (#2656)
fixFix missing response when AUTH is errored inside a transaction (#2287)
securityCVE-2025-32023 prevent out-of-bounds write during hyperloglog operations (#2146)
securityCVE-2025-48367 retry accept on transient errors (#2315)