Upgrade urgency HIGH: This release includes CVE fix for valkey-check-aof tool, we recommend you
apply as soon as possible if you use the tool.
Security fixes
- CVE-2025-27151 Check length of AOF file name in valkey-check-aof (#2146)
Bug fixes
- Properly escape double quotes and backslash in
MONITOR
command (#2036) - Fix high CPU usage when fetching a random element in skewed sparse hash table (#2085)
- Fix a bug that allowed clients to process commands when the server has paused command processing (#2109)
- Fix a crash where the wrong slot is used when processing sharded pubsub unsubscribe events (#2137)
- Fix a crash when a module attempts to write auxiliary data with AOF enabled (#2132)
- Fix a bug where the engine may crash when establishing new outbound TLS connections (#2140)
- Fix a bug where a cluster bus packet may be incorrectly marked as invalid (#2144)
- Fix a bug where CLUSTER SLOTS/NODES information can be stale after updating node port/tls-port (#2186)
- Fix a bug where replica in cluster mode can't finish failover when config epoch is outdated (#2178)
- Fix a bug to avoid CLIENT UNBLOCK command to unblock paused clients (#2117)
Full Changelog: 8.1.1...8.1.2