[ALSA-2025:11401] Important: valkey security update
Type:
security
Severity:
important
Release date:
2025-07-28
Description:
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * redis: Redis Stack Buffer Overflow (CVE-2025-27151) * redis: Redis Unauthenticated Denial of Service (CVE-2025-48367) * redis: Redis Hyperloglog Out-of-Bounds Write Vulnerability (CVE-2025-32023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 valkey-8.0.4-1.el10_0.aarch64.rpm ad441a7257dfb66c583d041510412122fdb50684bed0ab85ebc61f26f3871cc1
aarch64 valkey-devel-8.0.4-1.el10_0.aarch64.rpm ece8bec1dd4327bf0f814f75a8496366121d0065e33eca1649decf50ecb61cfd
ppc64le valkey-8.0.4-1.el10_0.ppc64le.rpm 83551fe42832462f1bc372705c5454a1e74abac60403d5523bee3d31cc151f22
ppc64le valkey-devel-8.0.4-1.el10_0.ppc64le.rpm d01cdc50d583446a47de176a9da8145986a5450b548d5e24974984b83b4c66f6
s390x valkey-8.0.4-1.el10_0.s390x.rpm 2a2871682e2967dc94e6fa33402d1781a307e38a57f355959c1607ffdd094d19
s390x valkey-devel-8.0.4-1.el10_0.s390x.rpm 663e7baca91a22c7d61906a4b72d4cca963c4c5ea97cd9aeeb976bdbf5f93e5e
x86_64 valkey-devel-8.0.4-1.el10_0.x86_64.rpm 3c5161e2ba85688ffed0b3d22d7793545749058ed9e2b9052b27cda675986516
x86_64 valkey-8.0.4-1.el10_0.x86_64.rpm c0e967fab938e500a48b118e417f2365633c72f3c22e95d5092f200248db3e62
x86_64_v2 valkey-8.0.4-1.el10_0.x86_64_v2.rpm ab64dab1d2014e17100f7d0ee8cde526c6f5b973eac4fdf6c9d4cc692eadabe1
x86_64_v2 valkey-devel-8.0.4-1.el10_0.x86_64_v2.rpm e1543a847356ecf70b12ef7e8f692cac990e0d35588b14a7fef63f74bebb61da
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.