PublicArchive/valkey
2
0
Fork 0
mirror of https://github.com/valkey-io/valkey.git synced 2026-05-06 05:26:42 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
7.2
valkey/src
T
History
Ran Shidlansik 5891a6150b Add release notes entry for Valkey 7.2.13 (#3631) 
Add a release notes entry for **Valkey 7.2.13** covering the three
security fixes being ported to the `7.2` branch:

- **CVE-2026-23479** — Use-After-Free in unblock client flow
- **CVE-2026-25243** — Invalid Memory Access in RESTORE command
- **CVE-2026-23631** — Use-after-free when full sync occurs during a
yielding Lua/function execution

Only modifies `00-RELEASENOTES`. The actual code fixes are in separate
PRs targeting `7.2`.

---------

Signed-off-by: Madelyn Olson <madelyneolson@gmail.com>
Co-authored-by: Madelyn Olson <madelyneolson@gmail.com>
2026-05-05 20:56:13 -07:00
..
commands
Fix that slot return in CLUSTER SHARDS should be integer (#12561)
2023-10-18 10:44:10 +03:00
modules
Remove REDISMODULE_ prefixes and introduce compatibility header (#194)
2024-04-06 21:59:15 -07:00
.gitignore
…
acl.c
Fix undefined behavior in raxFreeWithCallback call with lpFree
2026-02-23 17:59:54 -08:00
adlist.c
Remove duplicate code in listAddNodeTail (#11733)
2023-01-20 13:18:52 -08:00
adlist.h
optimize unwatchAllKeys() (#11511)
2022-11-23 17:39:08 +02:00
ae_epoll.c
Fail fast when systemic error occurs in poll (#8749)
2021-04-26 15:52:06 +03:00
ae_evport.c
Fix cluster bus extensions backwards compatibility (#10206)
2022-01-30 19:43:37 +02:00
ae_kqueue.c
Fix the timing of read and write events under kqueue (#9416)
2021-09-02 11:07:51 +03:00
ae_select.c
fix unused argument warning in ae_select.c (#10824)
2022-06-07 14:47:09 +03:00
ae.c
Fix overflow calculation for next timer event (#12474)
2023-10-18 10:44:10 +03:00
ae.h
Add event loop support to the module API (#10001)
2022-01-18 13:10:07 +02:00
anet.c
retry accept on transient errors (CVE-2025-48367) (#2315)
2025-07-07 17:45:35 +03:00
anet.h
retry accept on transient errors (CVE-2025-48367) (#2315)
2025-07-07 17:45:35 +03:00
aof.c
Fix redis-check-aof incorrectly considering data in manifest format as MP-AOF (#12958)
2024-07-02 00:24:19 -07:00
asciilogo.h
Madelyn's attempt as a logo (#251)
2024-04-07 17:32:10 -07:00
atomicvar.h
Adding parentheses and do-while(0) to macros (#11080)
2022-08-03 19:38:08 +03:00
bio.c
Fix assumptions that pthread functions set errno (#2526)
2025-10-01 16:04:08 +02:00
bio.h
Implementing the WAITAOF command (issue #10505) (#11713)
2023-03-14 20:26:21 +02:00
bitops.c
Change compiler optimizations to -O3 -flto (#11207)
2022-10-02 15:15:14 +03:00
blocked.c
Fix UAF in unblockClientOnKey when reprocessed command frees the client (CVE-2026-23479) (#3618)
2026-05-05 17:03:42 -07:00
call_reply.c
Fix undefined behavior: remove function pointer type casts
2026-05-05 17:06:23 -07:00
call_reply.h
Remove REDISMODULE_ prefixes and introduce compatibility header (#194)
2024-04-06 21:59:15 -07:00
childinfo.c
fixes for fork child exit and test: #11463 (#11499)
2022-11-12 20:35:34 +02:00
cli_commands.c
Reimplement cli hints based on command arg docs (#10515)
2023-03-30 19:03:56 +03:00
cli_commands.h
Reimplement cli hints based on command arg docs (#10515)
2023-03-30 19:03:56 +03:00
cli_common.c
redis-cli: Support URIs with IPv6 (#11834)
2023-06-29 19:32:01 +03:00
cli_common.h
Remove prototypes with empty declarations (#12020)
2023-05-02 17:31:32 -07:00
cluster.c
Fix for [CVE-2026-21863] Remote DoS with malformed Valkey Cluster bus message
2026-02-23 17:59:54 -08:00
cluster.h
Pass extensions to node if extension processing is handled by it (#52)
2024-04-08 09:26:13 -07:00
commands.c
Reimplement cli hints based on command arg docs (#10515)
2023-03-30 19:03:56 +03:00
commands.def
Support NO ONE block in REPLICAOF command json (#12633)
2023-10-18 10:44:10 +03:00
commands.h
Replaced comment with excessive warning.
2023-07-16 17:04:15 -05:00
config.c
Merge commit from fork
2025-10-03 06:32:24 -07:00
config.h
Fix compile on macOS 13 (#12611)
2023-10-18 10:44:10 +03:00
connection.c
Remove prototypes with empty declarations (#12020)
2023-05-02 17:31:32 -07:00
connection.h
Support TLS service when "tls-cluster" is not enabled and persist both plain and TLS port in nodes.conf (#12233)
2023-06-26 07:43:38 -07:00
connhelpers.h
Fixed some typos, add a spell check ci and others minor fix (#8890)
2021-06-10 15:39:33 +03:00
crc16_slottable.h
…
crc16.c
…
crc64.c
Add --large-memory flag for REDIS_TEST to enable tests that consume more than 100mb (#9784)
2021-11-16 08:55:10 +02:00
crc64.h
Add --large-memory flag for REDIS_TEST to enable tests that consume more than 100mb (#9784)
2021-11-16 08:55:10 +02:00
crcspeed.c
Fixed some typos, add a spell check ci and others minor fix (#8890)
2021-06-10 15:39:33 +03:00
crcspeed.h
Added crcspeed library
2020-04-24 17:11:21 -07:00
db.c
Fix undefined behavior: remove function pointer type casts
2026-05-05 17:06:23 -07:00
debug.c
Add output buffer limiting for unauthenticated clients (#1992)
2025-04-23 20:26:34 +02:00
debugmacro.h
Supplement define guards to prevent multiple inclusion (#10246)
2022-02-06 20:13:34 -08:00
defrag.c
Fix crash in active defrag (#883)
2024-08-12 13:38:20 -07:00
dict.c
Use CLZ in _dictNextExp to get the next power of two (#12815)
2024-01-09 13:51:49 +02:00
dict.h
Make a light weight version (default) of DEBUG HTSTATS (#12212)
2023-05-24 16:27:44 +03:00
endianconv.c
Avoid using unsafe C functions (#10932)
2022-07-18 10:56:26 +03:00
endianconv.h
Add --large-memory flag for REDIS_TEST to enable tests that consume more than 100mb (#9784)
2021-11-16 08:55:10 +02:00
eval.c
Fix undefined behavior: remove function pointer type casts
2026-05-05 17:06:23 -07:00
evict.c
initialize local robj variable during evictionPoolPopulate (#2285)
2025-06-30 10:48:46 +08:00
expire.c
Before evicted and before expired server events are not executed inside an execution unit. (#12733)
2024-01-09 13:51:49 +02:00
fmacros.h
Fix some compile warnings and errors when building with gcc-12 or clang (#12035)
2023-04-18 09:53:51 +03:00
function_lua.c
Merge commit from fork
2025-10-03 06:32:24 -07:00
functions.c
Fix undefined behavior: remove function pointer type casts
2026-05-05 17:06:23 -07:00
functions.h
Remove REDISMODULE_ prefixes and introduce compatibility header (#194)
2024-04-06 21:59:15 -07:00
geo.c
use embedded string object and more efficient ll2string for long long value convert to string (#12250)
2023-06-20 15:14:44 +03:00
geo.h
…
geohash_helper.c
GEOSEARCH BYBOX: Simplified haversine distance formula when longitude diff is 0 (#11579)
2022-12-05 15:45:04 +02:00
geohash_helper.h
Delete some unimplemented prototype. (#8882)
2021-04-29 08:25:10 +03:00
geohash.c
Fix mistake / outdated doc comment (#10521)
2022-04-04 15:35:49 +03:00
geohash.h
Remove duplicate header file include (#10264)
2022-02-08 16:49:47 +02:00
hyperloglog.c
Apply fixed for CVE-2025-32023 (#2314)
2025-07-07 17:45:35 +03:00
intset.c
Listpack encoding for sets (#11290)
2022-11-09 19:50:07 +02:00
intset.h
Listpack encoding for sets (#11290)
2022-11-09 19:50:07 +02:00
latency.c
Add basic eventloop latency measurement. (#11963)
2023-05-12 20:13:15 +03:00
latency.h
Add basic eventloop latency measurement. (#11963)
2023-05-12 20:13:15 +03:00
lazyfree.c
Fix defrag crash when using FLUSHDB ASYNC in cluster mode (#1873)
2025-04-10 10:57:24 +08:00
listpack_malloc.h
Use dummy allocator to make accesses defined as per standard (#11982)
2023-04-10 20:38:40 +03:00
listpack.c
Fix undefined behavior: remove function pointer type casts
2026-05-05 17:06:23 -07:00
listpack.h
Fix undefined behavior in raxFreeWithCallback call with lpFree
2026-02-23 17:59:54 -08:00
localtime.c
fix typos (#10402)
2022-03-09 13:58:23 +02:00
logreqres.c
Minor change around the req-res validator, skip sentinel commands (#12083)
2023-04-20 23:28:44 +03:00
lolwut5.c
Update Server version to valkey version (#232)
2024-04-06 20:43:42 -07:00
lolwut6.c
Update Server version to valkey version (#232)
2024-04-06 20:43:42 -07:00
lolwut.c
Update Server version to valkey version (#232)
2024-04-06 20:43:42 -07:00
lolwut.h
add include guard for lolwut.h
2020-05-05 23:35:08 -04:00
lzf_c.c
Change lzf to handle values larger than UINT32_MAX (#9776)
2021-11-16 13:12:25 +02:00
lzf_d.c
Change lzf to handle values larger than UINT32_MAX (#9776)
2021-11-16 13:12:25 +02:00
lzf.h
Change lzf to handle values larger than UINT32_MAX (#9776)
2021-11-16 13:12:25 +02:00
lzfP.h
Change lzf to handle values larger than UINT32_MAX (#9776)
2021-11-16 13:12:25 +02:00
Makefile
Add all-with-unit-tests Makefile target to fix weekly CI (#3417)
2026-03-30 18:29:16 +02:00
memtest.c
Add sanitizer support and clean up sanitizer findings (#9601)
2021-11-11 13:51:33 +02:00
mkreleasehdr.sh
Update Server version to valkey version (#232)
2024-04-06 20:43:42 -07:00
module.c
Fix undefined behavior in raxFreeWithCallback call with lpFree
2026-02-23 17:59:54 -08:00
monotonic.c
Remove prototypes with empty declarations (#12020)
2023-05-02 17:31:32 -07:00
monotonic.h
Remove prototypes with empty declarations (#12020)
2023-05-02 17:31:32 -07:00
mt19937-64.c
Fix random element selection for large hash tables. (#8133)
2020-12-23 15:52:07 +02:00
mt19937-64.h
Fix random element selection for large hash tables. (#8133)
2020-12-23 15:52:07 +02:00
multi.c
Fix possible memory corruption in FLUSHALL when a client watches more than one key (#11854)
2023-02-28 12:02:55 +02:00
networking.c
Fix undefined behavior: remove function pointer type casts
2026-05-05 17:06:23 -07:00
notify.c
Add RM_PublishMessageShard (#10543)
2022-04-17 15:43:22 +03:00
object.c
fix: add samples to stream object consumer trees (#1825)
2025-04-23 19:03:29 +02:00
pqsort.c
Fix null pointer subtraction warning (#10498)
2022-04-04 18:38:18 +03:00
pqsort.h
…
pubsub.c
Optimize PSUBSCRIBE and PUNSUBSCRIBE from O(N*M) to O(N) (#12298)
2023-06-19 16:31:18 +03:00
quicklist.c
Fix crash due to merge of quicklist node introduced by #12955 (#13040)
2024-07-02 00:24:19 -07:00
quicklist.h
Add listpack encoding for list (#11303)
2022-11-16 20:29:46 +02:00
rand.c
Remove prototypes with empty declarations (#12020)
2023-05-02 17:31:32 -07:00
rand.h
Remove prototypes with empty declarations (#12020)
2023-05-02 17:31:32 -07:00
rax_malloc.h
…
rax.c
Fix raxRemove crash at memcpy() due to key size exceeds max Rax size (#1722)
2025-04-23 19:03:29 +02:00
rax.h
Squash merging 125 typo/grammar/comment/doc PRs (#7773)
2020-09-10 13:43:38 +03:00
rdb.c
Fix invalid memory access in RESTORE with malformed zipmap (CVE-2026-25243) (#3624)
2026-05-05 16:43:28 -07:00
rdb.h
update redis-check-rdb types (#12969)
2024-07-02 00:24:19 -07:00
redis-trib.rb
…
redisassert.c
Add sanitizer support and clean up sanitizer findings (#9601)
2021-11-11 13:51:33 +02:00
redisassert.h
Fix a prototype inconsitency of _serverAssert between redisassert.h and redis.h (#10872)
2022-06-19 08:42:12 +03:00
redismodule.h
Revert update of RedisModuleEvent_MasterLinkChange (#289)
2024-04-10 17:35:38 -07:00
release.c
Build TLS as a loadable module
2022-08-23 12:37:56 +03:00
replication.c
Fix undefined behavior: remove function pointer type casts
2026-05-05 17:06:23 -07:00
resp_parser.c
Fix discarded-qualifiers warnings reported by fedorarawhide (#2874)
2026-02-23 17:59:54 -08:00
resp_parser.h
Fix an mistake in comment (#10560)
2022-04-10 09:29:50 +03:00
rio.c
Reclaim page cache of RDB file (#11248)
2023-02-12 09:23:29 +02:00
rio.h
Reclaim page cache of RDB file (#11248)
2023-02-12 09:23:29 +02:00
script_lua.c
Fix for [CVE-2025-67733] RESP Protocol Injectiton via Lua error_reply
2026-02-23 17:59:54 -08:00
script_lua.h
Merge commit from fork
2025-10-03 06:32:24 -07:00
script.c
Update and pin github actions to full SHAs for supply chain security (#3185)
2026-02-23 17:59:54 -08:00
script.h
Remove prototypes with empty declarations (#12020)
2023-05-02 17:31:32 -07:00
sds.c
Fix undefined behavior in raxFreeWithCallback call with lpFree
2026-02-23 17:59:54 -08:00
sds.h
Fix undefined behavior in raxFreeWithCallback call with lpFree
2026-02-23 17:59:54 -08:00
sdsalloc.h
Sanitize dump payload: fail RESTORE if memory allocation fails
2020-12-06 14:54:34 +02:00
sentinel.c
Update Server version to valkey version (#232)
2024-04-06 20:43:42 -07:00
server.c
Fix undefined behavior: remove function pointer type casts
2026-05-05 17:06:23 -07:00
server.h
Fix for [CVE-2025-67733] RESP Protocol Injectiton via Lua error_reply
2026-02-23 17:59:54 -08:00
setcpuaffinity.c
cpu affinity: DragonFlyBSD support (#7956)
2020-10-25 14:14:05 +02:00
setproctitle.c
Fix failed tests on Linux Alpine and add a CI job. (#8532)
2021-02-23 12:57:45 +02:00
sha1.c
Ignore -Wstringop-overread warning for SHA1Transform() on GCC 12 (#11538)
2022-11-24 15:27:16 +02:00
sha1.h
Fix some compile warnings and errors when building with gcc-12 or clang (#12035)
2023-04-18 09:53:51 +03:00
sha256.c
Add sanitizer support and clean up sanitizer findings (#9601)
2021-11-11 13:51:33 +02:00
sha256.h
fix explanation of sha256 (#9220)
2021-07-10 10:04:54 -05:00
siphash.c
Add sanitizer support and clean up sanitizer findings (#9601)
2021-11-11 13:51:33 +02:00
slowlog.c
minor optimization for slowlog get (#12103)
2023-04-25 10:17:21 +03:00
slowlog.h
Auto-generate the command table from JSON files (#9656)
2021-12-15 21:23:15 +02:00
socket.c
retry accept on transient errors (CVE-2025-48367) (#2315)
2025-07-07 17:45:35 +03:00
solarisfixes.h
…
sort.c
Avoid integer overflows in SETRANGE and SORT (CVE-2022-35977) (#11720)
2023-01-16 13:49:30 +02:00
sparkline.c
Fix Uninitialised value error in createSparklineSequence (LATENCY GRAPH) (#11892)
2023-03-09 12:05:50 +02:00
sparkline.h
…
stream.h
Stream consumers: Re-purpose seen-time, add active-time (#11099)
2022-11-30 14:21:31 +02:00
strl.c
Avoid using unsafe C functions (#10932)
2022-07-18 10:56:26 +03:00
syncio.c
…
syscheck.c
fix typos in syscheck (#11710)
2023-01-22 16:32:20 +02:00
syscheck.h
Add warning for suspected slow system clocksource setting (#10636)
2022-05-22 17:10:31 +03:00
t_hash.c
Optimize HRANDFIELD and ZRANDMEMBER case 3 when listpack encoded (#12205)
2023-05-22 15:48:32 +03:00
t_list.c
Fix: ltrim should not call signalModifiedKey when no elements are removed (#2787)
2026-02-23 17:59:54 -08:00
t_set.c
Fix SPOP/RESTORE propagation when doing lazy free (#12320)
2023-06-16 08:14:11 -07:00
t_stream.c
Fix undefined behavior in raxFreeWithCallback call with lpFree
2026-02-23 17:59:54 -08:00
t_string.c
Update and pin github actions to full SHAs for supply chain security (#3185)
2026-02-23 17:59:54 -08:00
t_zset.c
fix wrong data type conversion in zrangeResultBeginStore (#13148)
2024-07-02 00:24:19 -07:00
testhelp.h
skip new page cache reclame unit test when running in valgrind (#11808)
2023-02-16 10:50:58 +02:00
timeout.c
Blocking command with a 0.001 seconds timeout blocks indefinitely (#11688)
2023-01-08 01:02:48 -08:00
tls.c
retry accept on transient errors (CVE-2025-48367) (#2315)
2025-07-07 17:45:35 +03:00
tracking.c
Fix the bug that CLIENT REPLY OFF|SKIP cannot receive push notifications (#11875)
2023-03-12 17:50:44 +02:00
unix.c
retry accept on transient errors (CVE-2025-48367) (#2315)
2025-07-07 17:45:35 +03:00
util.c
Apply security fixes for CVEs (#1113)
2024-10-02 13:11:08 -07:00
util.h
Reclaim page cache of RDB file (#11248)
2023-02-12 09:23:29 +02:00
valgrind.sup
Sanitize dump payload: fuzz tester and fixes for segfaults and leaks it exposed
2020-12-06 14:54:34 +02:00
valkey-benchmark.c
Changes references to redis binaries in output of "--help", "--version" (#113)
2024-04-09 09:49:33 +02:00
valkey-check-aof.c
Update and pin github actions to full SHAs for supply chain security (#3185)
2026-02-23 17:59:54 -08:00
valkey-check-rdb.c
update redis-check-rdb types (#12969)
2024-07-02 00:24:19 -07:00
valkey-cli.c
Fix redis-cli --count (for --scan, --bigkeys, etc) was ignored unless --pattern was also used (#13092)
2024-07-02 00:24:19 -07:00
valkeymodule.h
Update ValkeyModuleEvent_MasterLinkChange to ValkeyModuleEvent_PrimaryLinkChange (#262)
2024-04-08 09:16:45 -07:00
version.h
Add release notes entry for Valkey 7.2.13 (#3631)
2026-05-05 20:56:13 -07:00
ziplist.c
Fix undefined behavior: remove function pointer type casts
2026-05-05 17:06:23 -07:00
ziplist.h
Add --large-memory flag for REDIS_TEST to enable tests that consume more than 100mb (#9784)
2021-11-16 08:55:10 +02:00
zipmap.c
Fix invalid memory access in RESTORE with malformed zipmap (CVE-2026-25243) (#3624)
2026-05-05 16:43:28 -07:00
zipmap.h
Add --large-memory flag for REDIS_TEST to enable tests that consume more than 100mb (#9784)
2021-11-16 08:55:10 +02:00
zmalloc.c
Remove prototypes with empty declarations (#12020)
2023-05-02 17:31:32 -07:00
zmalloc.h
enable malloc_usable_size on haiku and dragonflybsd. (#12237)
2023-05-28 08:44:28 +03:00