Skip to content

Add release notes entry for Valkey 9.0.4#3634

Merged
madolson merged 2 commits into
valkey-io:9.0from
ranshid:release-notes-9.0.4
May 6, 2026
Merged

Add release notes entry for Valkey 9.0.4#3634
madolson merged 2 commits into
valkey-io:9.0from
ranshid:release-notes-9.0.4

Conversation

@ranshid

@ranshid ranshid commented May 5, 2026

Copy link
Copy Markdown
Member

Add a release notes entry for Valkey 9.0.4 covering the three security fixes being ported to the 9.0 branch:

  • CVE-2026-23479 — Use-After-Free in unblock client flow
  • CVE-2026-25243 — Invalid Memory Access in RESTORE command
  • CVE-2026-23631 — Use-after-free when full sync occurs during a yielding Lua/function execution

Only modifies 00-RELEASENOTES. The actual code fixes are in separate PRs targeting 9.0.

@madolson madolson marked this pull request as ready for review May 6, 2026 00:14
ranshid and others added 2 commits May 5, 2026 17:15
Signed-off-by: Madelyn Olson <madelyneolson@gmail.com>
@madolson madolson force-pushed the release-notes-9.0.4 branch from 141f922 to 7c97fd5 Compare May 6, 2026 00:15

@madolson madolson left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, reviewed the tests and they seem OK

@madolson madolson merged commit 1cbee84 into valkey-io:9.0 May 6, 2026
59 of 67 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants