Important: valkey

Issue Overview: Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not...

Important: valkey

Issue Overview: Redis is an open source, in-memory database that persists on disk. In versions starting at 2.6 and prior to 7.4.3, An unauthenticated client can cause unlimited growth of output buffers, until the server runs out of memory or is killed. By default, the Redis configuration does not...

valkey-8.0.3-1.1 on GA media (moderate)

valkey-8.0.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15035-1 Rating: moderate Cross-References: CVE-2025-21605 CVSS scores: CVE-2025-21605 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-21605 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

OPENSUSE-SU-2025:15035-1 valkey-8.0.3-1.1 on GA media

These are all security issues fixed in the valkey-8.0.3-1.1 package on the GA media of openSUSE Tumbleweed...

Ubuntu: Security Advisory (USN-7359-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 24.04 LTS / 24.10 : Valkey vulnerabilities (USN-7359-1)

The remote Ubuntu 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7359-1 advisory. It was discovered that Valkey did not properly handle memory cleanup. An attacker could possibly use this issue to execute arbitrary code...

USN-7359-1 valkey vulnerabilities

It was discovered that Valkey did not properly handle memory cleanup. An attacker could possibly use this issue to execute arbitrary code. CVE-2024-46981 It was discovered that Valkey did not properly handle resource access permissions. An authenticated attacker could possibly use this issue to...

USN-7359-1: Valkey vulnerabilities

It was discovered that Valkey did not properly handle memory cleanup. An attacker could possibly use this issue to execute arbitrary code. CVE-2024-46981 It was discovered that Valkey did not properly handle resource access permissions. An authenticated attacker could possibly use this issue to...

CVE-2024-46981 affecting package valkey for versions less than 8.0.2-1

CVE-2024-46981 affecting package valkey for versions less than 8.0.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-51741 affecting package valkey for versions less than 8.0.2-1

CVE-2024-51741 affecting package valkey for versions less than 8.0.2-1. An upgraded version of the package is available that resolves this issue...

Fedora: Security Advisory (FEDORA-2025-9eccdb2c3e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

valkey-8.0.2-1.1 on GA media (moderate)

valkey-8.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14638-1 Rating: moderate Cross-References: CVE-2024-46981 CVE-2024-51741 CVSS scores: CVE-2024-46981 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-46981 SUSE : 8.7...

AZL-55286 CVE-2024-46981 affecting package valkey for versions less than 8.0.2-1

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate...

AZL-55283 CVE-2024-51741 affecting package valkey for versions less than 8.0.2-1

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector which, when accessed, triggers a server panic and subsequent denial of service. The problem is fixed in Redis 7.2.7 and 7.4.2...

CVE-2024-31228 affecting package valkey for versions less than 8.0.1-1

CVE-2024-31228 affecting package valkey for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-31227 affecting package valkey for versions less than 8.0.1-1

CVE-2024-31227 affecting package valkey for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-31449 affecting package valkey for versions less than 8.0.1-1

CVE-2024-31449 affecting package valkey for versions less than 8.0.1-1. An upgraded version of the package is available that resolves this issue...

valkey-8.0.1-1.1 on GA media (moderate)

valkey-8.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14412-1 Rating: moderate Cross-References: CVE-2024-31227 CVE-2024-31228 CVE-2024-31449 CVSS scores: CVE-2024-31227 SUSE : 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H CVE-2024-31228 SUSE : 6.5...

OPENSUSE-SU-2024:14412-1 valkey-8.0.1-1.1 on GA media

These are all security issues fixed in the valkey-8.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

[SECURITY] Fedora 39 Update: valkey-8.0.1-1.fc39

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...