Percona Packages for Valkey 8.0.1 release notes

Upgrade urgency levels

• LOW: No need to upgrade unless there are new features you want to use.
• MODERATE: Program an upgrade of the server, but it’s not urgent.
• HIGH: There is a critical bug that may affect a subset of users. Upgrade!
• CRITICAL: There is a critical bug affecting MOST USERS. Upgrade ASAP.
• SECURITY: There are security fixes in the release.

Valkey 8.0.1 - Released Tue 1 Oct 2024

Upgrade urgency SECURITY.

This release includes security fixes we recommend you apply as soon as possible.

Bug fixes

• Fix a build issue with RDMA when using additional make parameters. (#1074)
• Fix an issue where CLUSTER SLOTS might return the wrong tcp or tls port when called from inside a script or from a module. (#1072)
• Fix a crash when CLUSTER SLOTS or CLUSTER SHARDS is called from inside a script or from a module. (#1063)
• Fix a build issue on systems where <threads.h> is unavailable. (#1053)
• Fix an issue with the default sentinel.conf being invalid. (#1040)

Security fixes

• (CVE-2024-31449) Lua library commands may lead to stack overflow and potential RCE.
• (CVE-2024-31227) Potential Denial-of-service due to malformed ACL selectors.
• (CVE-2024-31228) Potential Denial-of-service due to unbounded pattern matching.