UbuntuUpdates.org

Package "valkey"


Moved to noble:universe:updates


Name: valkey

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Conversion script and compatibility symlinks for Redis
  • Persistent key-value database with network interface (monitoring)
  • Persistent key-value database with network interface
  • Persistent key-value database with network interface (client)
Latest version: *DELETED*
Release: noble (24.04)
Level: proposed
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "valkey" in Noble

Repository Area Version
security universe 7.2.12+dfsg1-0ubuntu0.1
updates universe 7.2.13+dfsg1-0ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: *DELETED* 2026-07-09 20:08:33 UTC
Moved to noble:universe:updates
No changelog for deleted or moved packages.

Version: 7.2.13+dfsg1-0ubuntu0.1 2026-06-30 21:07:22 UTC

  valkey (7.2.13+dfsg1-0ubuntu0.1) noble; urgency=medium

  * New upstream version 7.2.13 (LP: #2151296)
    - Security fixes:
      + CVE-2026-23479: Use-After-Free in unblock client flow.
      + CVE-2026-25243: Invalid Memory Access in RESTORE command.
      + CVE-2026-23631: Use-after-free when full sync occurs during a yielding
        Lua/function execution.

 -- Lena Voytek <email address hidden> Thu, 04 Jun 2026 09:54:12 -0400
2151296 Update Valkey to 7.2.13 in noble, 8.1.7 in questing, and 9.0.4 in resolute and stonking
CVE-2026-23479 Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `pro
CVE-2026-25243 Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values
CVE-2026-23631 Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-repl

Version: *DELETED* 2026-03-16 20:08:53 UTC
Moved to noble:universe:updates
No changelog for deleted or moved packages.

Version: 7.2.12+dfsg1-0ubuntu0.1 2026-03-04 00:08:28 UTC

  valkey (7.2.12+dfsg1-0ubuntu0.1) noble; urgency=medium

  * New upstream version 7.2.12 (LP: #2142590)
    - Security fixes:
        + CVE-2025-67733: RESP Protocol Injection via Lua error_reply.
        + CVE-2026-21863: Remote DoS with malformed Valkey Cluster bus message.
    - Bug fixes:
        + Fix ltrim should not call signalModifiedKey when no elements are
          removed.
        + Fix potential infinite loop in clusterNodeGetMaster.
        + Avoids crash during MODULE UNLOAD when ACL rules reference a module
          command and subcommand.

 -- Lena Voytek <email address hidden> Tue, 24 Feb 2026 09:01:01 -0500
2142590 Update Valkey to 7.2.12 in noble, 8.1.6 in questing, and 9.0.3 in resolute
CVE-2025-67733 Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject
CVE-2026-21863 Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus

Version: *DELETED* 2025-11-13 20:07:51 UTC
Moved to noble:universe:updates
No changelog for deleted or moved packages.


About   -   Send Feedback to @ubuntu_updates