[ALSA-2026:25216] Important: valkey security update
Type:
security
Severity:
important
Release date:
2026-08-13
Description:
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479) * redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631) * redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 valkey-devel-8.0.9-1.el10_2.aarch64.rpm 0d054215154dbc73d36ca5e3c9eff8ea065b6ac4e470c31c88432b15c53fbe20
aarch64 valkey-8.0.9-1.el10_2.aarch64.rpm 3c422160d0cade8908ac8ec40170129b4b578ff1a7851850cc84157187eecd8b
ppc64le valkey-devel-8.0.9-1.el10_2.ppc64le.rpm a8b95d6226ca89f443adc40f97fba28e6800f4bb1cc53b2cc59306eb258aff3a
ppc64le valkey-8.0.9-1.el10_2.ppc64le.rpm d9d01abfea281acf7ef7a5af2505230b924db6d74e8ace9b87cf1566ae9675ed
s390x valkey-devel-8.0.9-1.el10_2.s390x.rpm 581a82171a3dd30d5bee7c247dc479a632406bf0824bf093e060257c14d4d55e
s390x valkey-8.0.9-1.el10_2.s390x.rpm a4180b9d3df542d7ffc114eb61d08c4fc6d83262e891e250a0623ecda83a956b
x86_64 valkey-devel-8.0.9-1.el10_2.x86_64.rpm c777c492c3d86da0c8899867867923fdb18294b7fe98c2c7f09bd55b722b55e6
x86_64 valkey-8.0.9-1.el10_2.x86_64.rpm ff30a603915c2a829644cd47e3fead01361754b9ac23118993530b13c48dad74
x86_64_v2 valkey-8.0.9-1.el10_2.x86_64_v2.rpm 7439c27e4d95d3b500854184556b632a6e5a325eab32142c1b232a580ac44e6a
x86_64_v2 valkey-devel-8.0.9-1.el10_2.x86_64_v2.rpm c66aef2dd0d626eb3afccd2780a6fc5e4d03f11dab1721a0bf27b84994842ba2
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.