[ALSA-2026:3443] Important: valkey security update
Type:
security
Severity:
important
Release date:
2026-03-05
Description:
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): * Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts (CVE-2025-67733) * valkey: Valkey: Denial of Service via invalid clusterbus packet (CVE-2026-21863) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 valkey-devel-8.0.7-1.el10_1.aarch64.rpm 45c850e66163f8b2046951f2455a0c6a36b2c9276d945cda92498aee3a439f50
aarch64 valkey-8.0.7-1.el10_1.aarch64.rpm c309c907c613b6fe8db76511743ae2c923d2aa920e401b68ea2ea29ef2497731
ppc64le valkey-devel-8.0.7-1.el10_1.ppc64le.rpm be730de260cf14ccacce06dc3bc1f9edefd55dec92ead4e69908ee00d1c663bb
ppc64le valkey-8.0.7-1.el10_1.ppc64le.rpm bea74fb9c772d4fd5ef8b7620b3693ca216e05f143a62a35e0630233a6b63d9a
s390x valkey-devel-8.0.7-1.el10_1.s390x.rpm 0d146c14d5282f9df4845e6188a85ee4ec04d03562ce11eca55eecd285081aa7
s390x valkey-8.0.7-1.el10_1.s390x.rpm 6152785df54daa0adddb49f6e6959268cc331398b433ba2e976d9088cd6db1eb
x86_64 valkey-8.0.7-1.el10_1.x86_64.rpm 084412aff980b7568c63fa57e0d21c70f72092d8811f104c64bdda1b9afd07f7
x86_64 valkey-devel-8.0.7-1.el10_1.x86_64.rpm 23f6fb9c50f9c055c27f97e905fdd2ebd77a152a853a2b56519df65722b9a4c5
x86_64_v2 valkey-8.0.7-1.el10_1.x86_64_v2.rpm 7523cdc0ff74920d5862072808db5d1f52379f7b0f58d4ca1ebd6ee452b917c4
x86_64_v2 valkey-devel-8.0.7-1.el10_1.x86_64_v2.rpm b9b46abafba2b793b671fe20c4b2b21859627f03e474c49a69e8a7625b5304b5
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.