Valkey 7.2.7 release notes¶
Upgrade urgency levels¶
- LOW: No need to upgrade unless there are new features you want to use.
- MODERATE: Program an upgrade of the server, but it’s not urgent.
- HIGH: There is a critical bug that may affect a subset of users. Upgrade!
- CRITICAL: There is a critical bug affecting MOST USERS. Upgrade ASAP.
- SECURITY: There are security fixes in the release.
Valkey 7.2.7 - Released Tue 01 Oct 2024¶
Upgrade urgency SECURITY.
This release includes security fixes we recommend you apply as soon as possible.
Bug fixes¶
- Prevented AOF from being incorrectly disabled after loading RDB data, ensuring proper re-enabling of AOF. (#1001)
- Resolved issues in replicationSetPrimary where the primary node’s IP/port updates were not correctly handled in the cluster gossip section. (#965)
Security fixes¶
- (CVE-2024-31449) Lua library commands may lead to stack overflow and potential RCE.
- (CVE-2024-31227) Potential Denial-of-service due to malformed ACL selectors.
- (CVE-2024-31228) Potential Denial-of-service due to unbounded pattern matching.