Valkey 8.1.10 deprecates ACL flags and fixes critical RDMA vulnerability

Valkey version 8.1.10 introduces several fixes and changes, including a critical security patch addressing a use-after-free vulnerability in RDMA connection handling. According to the project's GitHub release notes, this issue could allow an authenticated client to crash the server using the CLIENT KILL command if the server is built with USE_RDMA and configured with an RDMA listener. Additionally, the release deprecates the sanitize-dump-payload and related ACL flags, which are now no-ops, as part of broader validation improvements for RDB load and RESTORE operations.

Operators planning to upgrade should ensure their RDMA configurations are reviewed, particularly if RDMA listeners are enabled, as this vulnerability directly affects such setups. Furthermore, systems relying on the deprecated ACL flags for security or operational workflows may require adjustments to prevent unintended behavior. This pattern of deprecating legacy features while addressing critical vulnerabilities reflects a common trend in modern releases, emphasizing both security and long-term maintainability.