Add release notes entry for Valkey 8.1.7 (#3633)

Add a release notes entry for **Valkey 8.1.7** covering the three
security fixes being ported to the `8.1` branch:

- **CVE-2026-23479** — Use-After-Free in unblock client flow
- **CVE-2026-25243** — Invalid Memory Access in RESTORE command
- **CVE-2026-23631** — Use-after-free when full sync occurs during a
yielding Lua/function execution

Only modifies `00-RELEASENOTES`. The actual code fixes are in separate
PRs targeting `8.1`.

---------

Signed-off-by: Madelyn Olson <madelyneolson@gmail.com>
Co-authored-by: Madelyn Olson <madelyneolson@gmail.com>
This commit is contained in:
Ran Shidlansik
2026-05-06 06:56:35 +03:00
committed by GitHub
parent ba11c9e458
commit 65163a1965
2 changed files with 15 additions and 2 deletions
+13
View File
@@ -9,6 +9,19 @@ CRITICAL: There is a critical bug affecting MOST USERS. Upgrade ASAP.
SECURITY: There are security fixes in the release.
--------------------------------------------------------------------------------
================================================================================
Valkey 8.1.7 - Tue 05 May 2026
================================================================================
Upgrade urgency SECURITY: This release includes security fixes we recommend you
apply as soon as possible.
Security fixes
==============
* (CVE-2026-23479) Use-After-Free in unblock client flow
* (CVE-2026-25243) Invalid Memory Access in RESTORE command
* (CVE-2026-23631) Use-after-free when full sync occurs during a yielding Lua/function execution
================================================================================
Valkey 8.1.6 - Released Mon 23 February 2026
================================================================================
+2 -2
View File
@@ -4,8 +4,8 @@
* similar. */
#define SERVER_NAME "valkey"
#define SERVER_TITLE "Valkey"
#define VALKEY_VERSION "8.1.6"
#define VALKEY_VERSION_NUM 0x00080106
#define VALKEY_VERSION "8.1.7"
#define VALKEY_VERSION_NUM 0x00080107
/* The release stage is used in order to provide release status information.
* In unstable branch the status is always "dev".
* During release process the status will be set to rc1,rc2...rcN.