FEDORA-2025-8e2eddc063 — security update for valkey

stable

valkey-8.0.4-1.fc42

FEDORA-2025-8e2eddc063 created by remi a year ago for Fedora 42

Valkey 8.0.4 - Released Mon 07 July 2025

Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible.

Security fixes

CVE-2025-32023 prevent out-of-bounds write during hyperloglog operations (#2146)
CVE-2025-48367 retry accept on transient errors (#2315)

Security fixes backported from 8.1.2

CVE-2025-27151 Check length of AOF file name in valkey-check-aof (#2146)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-8e2eddc063

This update has been submitted for testing by remi.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago

remi edited this update.

a year ago

This update has been pushed to testing.

a year ago

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please log in to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

modified

a year ago

approved

a year ago

Builds

valkey-8.0.4-1.fc42

BZ#2380113 CVE-2025-27151 valkey: Redis Stack Buffer Overflow [fedora-all]

BZ#2380116 CVE-2025-48367 valkey: Redis Unauthenticated Denial of Service [fedora-all]

BZ#2380118 CVE-2025-32023 valkey: Redis Hyperloglog Out-of-Bounds Write Vulnerability [fedora-all]

valkey-8.0.4-1.fc42

Automated Test Results

ignored