UbuntuUpdates.org

Package "valkey-server"

Name: valkey-server

Description:

Persistent key-value database with network interface
Latest version: 7.2.8+dfsg1-0ubuntu0.24.04.3
Release: noble (24.04)
Level: updates
Repository: universe
Head package: valkey
Homepage: https://valkey.io

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "valkey-server"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "valkey-server" in Noble

Repository Area Version
security universe 7.2.8+dfsg1-0ubuntu0.24.04.2

Changelog

Version: 7.2.8+dfsg1-0ubuntu0.24.04.3 2025-07-07 14:07:07 UTC

  valkey (7.2.8+dfsg1-0ubuntu0.24.04.3) noble; urgency=medium

  * d/valkey-redis-compat.postinst: Do not migrate on upgrade if redis files
    have already been migrated (LP: #2104217).

 -- Lena Voytek <email address hidden> Wed, 18 Jun 2025 16:58:33 -0400
Source diff to previous version
2104217 Package upgrade reinstalls /etc/valkey/REDIS_MIGRATION

Version: 7.2.8+dfsg1-0ubuntu0.24.04.2 2025-03-20 00:06:53 UTC

  valkey (7.2.8+dfsg1-0ubuntu0.24.04.2) noble-security; urgency=medium

  * No-change rebuild in the ~security pocket

 -- Julia Sarris <email address hidden> Mon, 03 Mar 2025 10:25:22 -0500
Source diff to previous version

Version: 7.2.8+dfsg1-0ubuntu0.24.04.1 2025-03-01 01:07:16 UTC

  valkey (7.2.8+dfsg1-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream version 7.2.8 (LP: #2097546)
    - Security fixes:
      + CVE-2024-46981: Lua script commands may lead to remote code
        execution.
      + CVE-2024-51741: Denial-of-service due to malformed ACL
        selectors.
    - Bug fixes:
      + Fix extra memory use when storing strings in inline protocol.
      + Fix error message when FUNCTION KILL is used on a script.
      + Fix last accessed time update using TOUCH with CLIENT NO-TOUCH
        option.

 -- Lena Voytek <email address hidden> Thu, 06 Feb 2025 08:58:24 -0500
Source diff to previous version
2097546 Update Valkey to 7.2.8 in noble and oracular
CVE-2024-46981 Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the gar
CVE-2024-51741 Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector wh

Version: 7.2.7+dfsg1-0ubuntu0.24.04.1 2025-01-07 04:07:05 UTC

  valkey (7.2.7+dfsg1-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream version 7.2.7 (LP: #2091129)
    - Security fixes:
      + CVE-2024-31449: Lua library commands may lead to stack overflow and
        potential RCE.
      + CVE-2024-31227: Potential Denial-of-service due to malformed ACL
        selectors.
      + CVE-2024-31228: Potential Denial-of-service due to unbounded pattern
        matching.
    - Bug fixes:
      + Fix re-enable of Append-Only File flag in RdbLoad module.
      + Fix cluster replica failure to establish replication link in race
        condition.
      + Fix valkeymodule-rs build issues due to typo in REGISTER_API.
      + Fix crash where command duration is not reset when client is blocked.
      + Fix CLUSTER SHARDS empty array return.
      + Fix client auth block when a cluster is down.
      + Fix MEET request reliability during link failure.
      + Ensure the --count option in redis-cli works correctly even without
        --pattern.
      + Fix redis-check-aof misidentifying data in manifest format as MP-AOF.
    - Updates:
      + Add clusterNodeIsVotingPrimary concept to fix issue where nodes outside
        the quorum group could mark nodes as failed.
      + Add compatibility with redis-sentinel for starting sentinel.
      + Update redis-check-rdb types to replace stream-v2 with stream-v3
  * d/watch: Fix repack suffix

 -- Lena Voytek <email address hidden> Thu, 05 Dec 2024 14:44:44 -0700
Source diff to previous version
2091129 Update Valkey to 7.2.7 in noble and oracular
CVE-2024-31449 Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack bu
CVE-2024-31227 Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may create a malformed ACL selector wh
CVE-2024-31228 Redis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, lo

Version: 7.2.5+dfsg1-2ubuntu4~24.04.1 2024-10-01 12:06:52 UTC

  valkey (7.2.5+dfsg1-2ubuntu4~24.04.1) noble; urgency=medium

  * Backport from Oracular to Noble (LP: #2081000).

 -- Lucas Kanashiro <email address hidden> Fri, 20 Sep 2024 20:19:57 -0300
2081000 Backport version from Oracular to Noble


About   -   Send Feedback to @ubuntu_updates