Aerospike Server Community Edition 8.2.0.1

Bug fixes

AER-6974

(QUERY) An expression-based secondary index query with collection type LIST, MAPKEYS, or MAPVALUES never selects that index through the query planner.

Editions affected: Enterprise, Federal & Community

AER-6976

(EXPRESSIONS) Fixed a node crash when an expression references a bin stored as a language-specific blob (particle types 7-12) or as particle type 16.

Editions affected: Enterprise, Federal & Community

AER-6977

(MASKING) Fix node crash when an aggregation query reads a set with masking rules while security is enabled.

Editions affected: Enterprise, Federal & Community

AER-6978

(DEPLOYMENT) Fix asd-coldstart silently warm-starting when ASD_OPTIONS is set in /etc/sysconfig/aerospike.

Editions affected: Enterprise, Federal & Community

AER-6979

(MEMORY) Fixed stop-writes not triggering, and cgroup memory stats disappearing, when container memory usage exceeds its cgroup limit.

Editions affected: Enterprise, Federal & Community

AER-6980

(CONFIGURATION) Fixed the memory best-practice warning labeling the stop-writes budget as "system memory".

Editions affected: Enterprise, Federal & Community

Known issues

Known issues for 8.2.0.1

Aerospike Server Community Edition 8.2.0.0

September 29, 2026  |  Download

New in this version

• Support for Ubuntu 26.04 LTS
• Preview startup flag (--preview) replaces --experimental
• List join (8.2.0) — concatenates list-of-strings elements; inverse of string split
• Blob b64_encode (8.2.0) — encodes blob to string; pairs with string b64_decode
• Structured server error details such as subcodes, messages, and expression traces

Developer experience

• String operations: 35 server-side read, modify, and conversion functions using the Operate API and expressions. Uses Unicode codepoints for index positions. See the string operations overview and operations reference.

• UTF-8 validation at string operation boundaries: String operations reject invalid UTF-8 with AS_ERR_INVALID_ENCODING. Standard writes still accept it and trigger a rate-limited warning. See Upgrade to Database 8.2.0 and later.

• ICU regular expressions: String regex_compare and regex_replace, the Aerospike expression language (AEL) =~ match operator, and regexReplace() compile patterns with ICU syntax, not PCRE or legacy POSIX cmp_regex syntax. Unsupported constructs are rejected at parse time. Replace operations use ICU's replacement dialect (capture references such as $1 and ${name}, $0, and \ escapes); an unresolvable $ fails the operation on any record the pattern matches, and is never evaluated on one it does not. Patterns that exceed ICU evaluation limits return AS_ERR_OP_NOT_APPLICABLE with AS_SUB_OPNOT_STRING_REGEX_LIMIT_EXCEEDED. See Regular expression syntax.

• Query optimizer: Database 8.2.0 adds a server-side query optimizer for automatic secondary index (SI) selection on AEL predicates.

  • Default behavior: A Developer SDK query with a where clause that finds no matching SI can fail with AS_ERR_SINDEX_NOT_FOUND (201) rather than reading every record, controlled per query or per Behavior by allowScansWithWhere. Queries without a where clause, background queries, and aggregations are unaffected.
  • Fallback option: Enable allowScansWithWhere to allow explicit fallback to primary index (PI) queries.
  • A query that carries no AEL and names no index runs against the primary index, as before. See Query optimizer.

• Unordered Map comparison in expressions: Expressions now support comparing unordered Maps, including equality comparisons. See Map comparison.

• Integer secondary index type name: Renamed the integer secondary index key type from numeric to integer for clarity. numeric is now deprecated but remains supported as an alias.

  • Usage: Specify integer with sindex-create and manage sindex create in asadm.
  • Existing indexes: No re-index required. Existing integer indexes continue to work.
  • API and command outputs:
    • sindex-list outputs type=integer when using v=v2 (v1 retains numeric for backward compatibility)
    • show sindex may still show numeric in the Bin Type column.
  • Client and deprecation behavior: Language client createIndex() APIs sending numeric on the wire will still be accepted. However, using numeric logs a warning and increments the deprecated_requests metric.

• Structured error details (Database 8.2.0 and later): Failed operations can now return extended error context based on a configurable verbosity level:

  • Level 1: Numeric subcode (scoped to parent status).
  • Level 2: Subcode + human-readable message.
  • Level 3: Subcode + message + expression trace (for expression failures).
  • Configuration: Opt-in per request via client policy (errorDetailVerbosity / error_detail_verbosity). Default is 0 (disabled), preserving existing application behavior.
  • Best Practice: Applications must dispatch error handling on the (status, subcode) pair, not subcode alone.
  • Coverage: Supported on single-record ops, batch (per-record), expressions, CDT, HLL, bitwise, string ops, transactions, and client-invoked UDFs.
  • Exclusions: Background UDF/operate jobs, batch-wide admission errors, and queries that fail after start.

Performance enhancements

• Wire compression (Enterprise Edition): Added Zstd compression for intra-cluster traffic to reduce cross-AZ (Availability Zone) network costs.
  • Supported traffic: Replica writes, partition migrations, and SMD full-sync messages.
  • Delta mode: Replica writes support delta encoding, transmitting only changed bytes against the prior record version
  • Configuration: Opt-in per transport and dynamically configurable without restarts. See Configure wire compression and Configure SMD wire compression.

Operations

• Improved memory over-configuration warning: The startup and dynamic-configuration memory best-practice check compares the configured maximum DRAM footprint, including indexes-memory-budget, in-memory data-size, and full max-write-cache and post-write-cache sizes, against the budget defined by stop-writes-sys-memory-pct, rather than comparing only in-memory data and index budgets to total system RAM. See Namespace memory budget.

• Wire compression metrics: Per-channel fabric byte counters, available in both editions, plus the Enterprise-only per-namespace replication and migration compression savings, delta-mode hit rates, and codec CPU percentages help you tune compression modes and levels. Query zstd-wire-stats for codec call counts and CPU; smd-info for SMD compression stats. Per-operation CPU percentages require enable-benchmarks-wire-compression. See the Metrics reference.

• Index checkpoint (Enterprise only, preview): Optional per-namespace durable copy of shared memory indexes for warm restart after a container replacement or host reboot. Enable with --preview index-checkpoint and per-namespace configuration. See Index checkpoint.

• SMD readiness on node join: A new or returning node completes its initial system metadata (SMD) sync before it accepts client or admin connections, and before it receives incoming record migrations. There is no configuration. See Upgrade instructions for rolling-upgrade behavior.

• Preview startup flag (--preview): Database 8.2.0 and later reject --experimental and require --preview to enable preview features by name. In this release, valid feature names are yaml-config (YAML configuration files) and index-checkpoint (index checkpoint). On Database 8.1.1 and 8.1.2, continue using --experimental for YAML configuration.

Breaking changes

CDT nesting depth limited to 64 levels

Starting with Aerospike Database 8.2.0, Lists and Maps support up to 64 levels of nesting. A top-level List or Map counts as level 1, and each nested List or Map adds one level. Keep collection values within this limit.

This change can affect data that predates this release when that data re-enters the server over the wire, such as:

• A client read-modify-write round trip on an existing List or Map nested deeper than 64 levels
• XDR shipping such a record to a destination running Database 8.2.0 or later
• Restoring a backup that was taken before the upgrade

The server checks the nesting depth of each List or Map value in a request: whole-bin writes, CDT operation values, and expression literals. It does not re-check values already stored, so an ordinary read of a List or Map stored deeper than 64 levels returns it unchanged.

Aerospike Server Community Edition 8.1.2.5

Bug fixes

AER-6944

(CONFIGURATION) Fix server crash when a preview YAML configuration sets service.work-directory.

Editions affected: Enterprise, Federal & Community

AER-6946

(CONFIGURATION) Fix preview YAML config parser starting one fifth the service threads and omitting the .conf parser's cross-field validation.

Editions affected: Enterprise, Federal & Community

AER-6947

(STORAGE) Fix cold-start set membership loss when a setless record version precedes the live record in device scan order.

Editions affected: Enterprise, Federal & Community

AER-6951

(CONFIGURATION) Fix asd startup crash on CPUs whose firmware reports sparse or large topology ids.

Editions affected: Enterprise, Federal & Community

AER-6952

(CLUSTERING) Fix 'recluster' failing after an aborted exchange round.

Editions affected: Enterprise, Federal & Community

AER-6953

(CDT) Fixed memory leaks in select operations when an apply expression modified the matched element, and when a context AND segment was rejected.

Editions affected: Enterprise, Federal & Community

AER-6954

(EXPRESSIONS) Fixed a memory leak when an expression's declared result type did not match the stored data.

Editions affected: Enterprise, Federal & Community

AER-6957

(UDF) CVE-2026-63662 Bounds-check msgpack deserialization.

Editions affected: Enterprise, Federal & Community

AER-6959

(KVS) CVE-2026-71423 Fix a crash when extracting a zero-length bytes element from a list or map.

Editions affected: Enterprise, Federal & Community

AER-6960

(CDT) CVE-2026-71419 Fix a heap overflow when writing a persist-index list or map of wide-encoded integers.

Editions affected: Enterprise, Federal & Community

AER-6961

(SINDEX) Fix stray leading ';' in sindex-list response for namespaces with only set indexes.

Editions affected: Enterprise, Federal & Community

AER-6962

(EXPRESSIONS) Fix an expression write operation reporting success when it declined to delete a bin.

Editions affected: Enterprise, Federal & Community

AER-6963

(STORAGE) For storage-engine pmem with encryption or commit-to-device, a cold start may lose records from in-flight MRT.

Editions affected: Enterprise & Federal Only

AER-6964

(XDR) Fix corrupted xdr-dc-state output for namespace names of seven or more characters.

Editions affected: Enterprise & Federal Only

AER-6965

(MEMORY) Fixed memory leaks in the secondary index definition hash, histogram teardown, and allocator self-check.

Editions affected: Enterprise, Federal & Community

AER-6966

(EXPRESSIONS) Fixed INF/WILDCARD markers and non-minimal msgpack encodings in list or map expression literals being rejected with PARAMETER_ERROR.

Editions affected: Enterprise, Federal & Community

Known issues

Known issues for 8.1.2.5

Aerospike Server Community Edition 8.1.2.4

Security fixes

AER-6937

(KVS) CVE-2026-PENDING Fix out-of-bounds read in GeoJSON and HLL particle wire parsers.

Editions affected: Enterprise, Federal & Community

Bug fixes

AER-6938

(CONFIGURATION) Fix transaction-max-ms YAML config storing milliseconds without ms-to-ns conversion.

Editions affected: Enterprise, Federal & Community

AER-6939

(EXPRESSIONS) Accept unsorted map/list literals in filter expressions by sorting at build time.

Editions affected: Enterprise, Federal & Community

Known issues

Known issues for 8.1.2.4

Aerospike Server Community Edition 8.1.2.3

Security fixes

AER-6925

(CDT) CVE-2026-PENDING Fixed a rare crash from an out-of-bounds read when comparing msgpack integers.

Editions affected: Enterprise, Federal & Community

AER-6926

(KVS) CVE-2026-55749 Fixed a memory leak when a proxy target received malformed or oversized requests.

Editions affected: Enterprise, Federal & Community

AER-6930

(CDT) CVE-2026-55753 Fixed list or map values in a filter expression bypassing validation.

Editions affected: Enterprise, Federal & Community

Bug fixes

AER-6918

(TRANSACTIONS) Fixed a server crash during MRT monitor transactions when security is enabled.

Editions affected: Enterprise & Federal Only

AER-6919

(INFO) Fixed dump-wb-summary command rejecting valid invocations.

Editions affected: Enterprise, Federal & Community

AER-6921

(KVS) Fix use_mounts memory leak on xmem pmem initialization error paths.

Editions affected: Enterprise, Federal & Community

AER-6922

(MASKING) Fix masking command to reject rules targeting the MRT monitor set.

Editions affected: Enterprise & Federal Only

AER-6923

(MEMORY) Restrict jem-stats output file path to prevent arbitrary file writes.

Editions affected: Enterprise, Federal & Community

AER-6924

(CDT) Fixed out-of-bounds read when parsing crafted truncated msgpack wire data.

Editions affected: Enterprise, Federal & Community

AER-6927

(XDR) Fixed a node crash on the XDR read path involving multi-record transactions.

Editions affected: Enterprise & Federal Only

AER-6928

(MASKING) Fix undefined behavior when parsing a single-entry masking context string.

Editions affected: Enterprise & Federal Only

AER-6929

(XDR) Fix unbounded stack growth when retrieving datacenter state.

Editions affected: Enterprise & Federal Only

Known issues

Known issues for 8.1.2.3

Aerospike Server Community Edition 8.1.2.2

Security fixes

AER-6907

(UDF) CVE-2026-55702, CVE-2026-55757, CVE-2026-57482 Fix path traversal in UDF filename handling. See security bulletin AS-2026-001 for additional details.

Editions affected: Enterprise, Federal & Community

AER-6909

(CDT) CVE-2026-PENDING Fix integer overflow in msgpack size calculator that accepts truncated structures. See security bulletin AS-2026-002 for additional details.

Editions affected: Enterprise, Federal & Community

AER-6910

(BATCH) CVE-2026-55755 Fix heap buffer overflow from missing op size validation in batch writes. See security bulletin AS-2026-003 for additional details.

Editions affected: Enterprise, Federal & Community

AER-6911

(CDT) CVE-2026-55754 Fix integer overflow in msgpack parse and compactify that accepts truncated structures. See security bulletin AS-2026-004 for additional details.

Editions affected: Enterprise, Federal & Community

AER-6914

(UDF) CVE-2026-55756 Fix Lua sandbox escape that allows arbitrary command execution. See security bulletin AS-2026-005 for additional details.

Editions affected: Enterprise, Federal & Community

Bug fixes

AER-6908

(KVS) Remove sprig root color check that slowed flash index warm restart.

Editions affected: Enterprise, Federal & Community

AER-6912

(CONFIGURATION) Fix YAML config duplicating devices and files as shadow devices.

Editions affected: Enterprise, Federal & Community

AER-6913

(CONFIGURATION) Fix YAML replication-factor setting being ignored.

Editions affected: Enterprise, Federal & Community

Improvements

AER-6915

(MEMORY) Subtract inactive file cache from cgroup memory tracking.

Editions affected: Enterprise, Federal & Community

AER-6916

(MEMORY) Increase mountinfo read buffer and warn on fallback to host memory.

Editions affected: Enterprise, Federal & Community

AER-6917

(LOGGING) Log sender UID and PID on SIGTERM.

Editions affected: Enterprise, Federal & Community

Known issues

Known issues for 8.1.2.2

Aerospike Server Community Edition 8.0.0.20

Bug fixes

AER-6947

(STORAGE) Fix cold-start set membership loss when a setless record version precedes the live record in device scan order.

Editions affected: Enterprise, Federal & Community

AER-6951

(CONFIGURATION) Fix asd startup crash on CPUs whose firmware reports sparse or large topology ids.

Editions affected: Enterprise, Federal & Community

AER-6952

(CLUSTERING) Fix 'recluster' failing after an aborted exchange round.

Editions affected: Enterprise, Federal & Community

AER-6954

(EXPRESSIONS) Fixed a memory leak when an expression's declared result type did not match the stored data.

Editions affected: Enterprise, Federal & Community

AER-6957

(UDF) CVE-2026-63662 Bounds-check msgpack deserialization.

Editions affected: Enterprise, Federal & Community

AER-6959

(KVS) CVE-2026-71423 Fix a crash when extracting a zero-length bytes element from a list or map.

Editions affected: Enterprise, Federal & Community

AER-6960

(CDT) CVE-2026-71419 Fix a heap overflow when writing a persist-index list or map of wide-encoded integers.

Editions affected: Enterprise, Federal & Community

AER-6962

(EXPRESSIONS) Fix an expression write operation reporting success when it declined to delete a bin.

Editions affected: Enterprise, Federal & Community

AER-6963

(STORAGE) For storage-engine pmem with encryption or commit-to-device, a cold start may lose records from in-flight MRT.

Editions affected: Enterprise & Federal Only

AER-6964

(XDR) Fix corrupted xdr-dc-state output for namespace names of seven or more characters.

Editions affected: Enterprise & Federal Only

AER-6965

(MEMORY) Fixed memory leaks in the secondary index definition hash, histogram teardown, and allocator self-check.

Editions affected: Enterprise, Federal & Community

AER-6966

(EXPRESSIONS) Fixed INF/WILDCARD markers and non-minimal msgpack encodings in list or map expression literals being rejected with PARAMETER_ERROR.

Editions affected: Enterprise, Federal & Community

Known issues

Known issues for 8.0.0.20

Aerospike Server Community Edition 8.0.0.19

Security fixes

AER-6937

(KVS) CVE-2026-PENDING Fix out-of-bounds read in GeoJSON and HLL particle wire parsers.

Editions affected: Enterprise, Federal & Community

Bug fixes

AER-6939

(EXPRESSIONS) Accept unsorted map/list literals in filter expressions by sorting at build time.

Editions affected: Enterprise, Federal & Community

Known issues

Known issues for 8.0.0.19

Aerospike Server Community Edition 8.0.0.18

Security fixes

AER-6925

(CDT) CVE-2026-PENDING Fixed a rare crash from an out-of-bounds read when comparing msgpack integers.

Editions affected: Enterprise, Federal & Community

AER-6926

(KVS) CVE-2026-55749 Fixed a memory leak when a proxy target received malformed or oversized requests.

Editions affected: Enterprise, Federal & Community

AER-6930

(CDT) CVE-2026-55753 Fixed list or map values in a filter expression bypassing validation.

Editions affected: Enterprise, Federal & Community

Bug fixes

AER-6919

(INFO) Fixed dump-wb-summary command rejecting valid invocations.

Editions affected: Enterprise, Federal & Community

AER-6921

(KVS) Fix use_mounts memory leak on xmem pmem initialization error paths.

Editions affected: Enterprise, Federal & Community

AER-6923

(MEMORY) Restrict jem-stats output file path to prevent arbitrary file writes.

Editions affected: Enterprise, Federal & Community

AER-6924

(CDT) Fixed out-of-bounds read when parsing crafted truncated msgpack wire data.

Editions affected: Enterprise, Federal & Community

AER-6927

(XDR) Fixed a node crash on the XDR read path involving multi-record transactions.

Editions affected: Enterprise & Federal Only

AER-6929

(XDR) Fix unbounded stack growth when retrieving datacenter state.

Editions affected: Enterprise & Federal Only

Known issues

Known issues for 8.0.0.18

Aerospike Server Community Edition 8.0.0.17

Security fixes

AER-6907

(UDF) CVE-2026-55702, CVE-2026-55757, CVE-2026-57482 Fix path traversal in UDF filename handling. See security bulletin AS-2026-001 for additional details.

Editions affected: Enterprise, Federal & Community

AER-6909

(CDT) CVE-2026-PENDING Fix integer overflow in msgpack size calculator that accepts truncated structures. See security bulletin AS-2026-002 for additional details.

Editions affected: Enterprise, Federal & Community

AER-6910

(BATCH) CVE-2026-55755 Fix heap buffer overflow from missing op size validation in batch writes. See security bulletin AS-2026-003 for additional details.

Editions affected: Enterprise, Federal & Community

AER-6911

(CDT) CVE-2026-55754 Fix integer overflow in msgpack parse and compactify that accepts truncated structures. See security bulletin AS-2026-004 for additional details.

Editions affected: Enterprise, Federal & Community

AER-6914

(UDF) CVE-2026-55756 Fix Lua sandbox escape that allows arbitrary command execution. See security bulletin AS-2026-005 for additional details.

Editions affected: Enterprise, Federal & Community

Bug fixes

AER-6908

(KVS) Remove sprig root color check that slowed flash index warm restart.

Editions affected: Enterprise, Federal & Community

Improvements

AER-6917

(LOGGING) Log sender UID and PID on SIGTERM.

Editions affected: Enterprise, Federal & Community

Known issues

Known issues for 8.0.0.17