Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 41: valkey 8.0.3 security fix advisory for CVE-2025-21605

fedora
Calendar Grey May 3, 2025
Dist Fedora Esm H88
Valkey 8.0.3 tackles vulnerabilities and enhances efficiency for Fedora clients, ensure updates are applied without delay.
Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible

Summary

Valkey is an advanced key-value store. It is often referred to as a data

structure server since keys can contain strings, hashes, lists, sets and

sorted sets.

You can run atomic operations on these types, like appending to a string;

incrementing the value in a hash; pushing to a list; computing set

intersection, union and difference; or getting the member with highest

ranking in a sorted set.

In order to achieve its outstanding performance, Valkey works with an

in-memory dataset. Depending on your use case, you can persist it either

by dumping the dataset to disk every once in a while, or by appending

each command to a log.

Valkey also supports trivial-to-setup master-slave replication, with very

fast non-blocking first synchronization, auto-reconnection on net split

and so forth.

Other features include Transactions, Pub/Sub, Lua scripting, Keys with a

limited time-to-live, and configuration settings to make Valkey behave like

a cache.

You can use Valkey from most programming languages also.

Update Information:

Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible. Bug fixes Optimize RDB load performance and fix cluster mode resizing on replica side (#1199) Fix memory leak in forgotten node ping ext code path (#1574) Fix cluster info sent stats for message with light header (#1563) Fix module LatencyAddSample still work when latency-monitor-threshold is 0 (#1541) Fix potential crash in radix tree recompression of huge keys (#1722) Fix error "SSL routines::bad length" when connTLSWrite is called second time with smaller buffer (#1737) Fix temp file leak druing replication error handling (#1721) Fix ACL LOAD crash on replica since the primary client don't has a user (#1842) Fix RANDOMKEY infinite loop during CLIENT PAUSE (#1850) fix: add samples to stream object consumer trees (#1825) Fix cluster slot stats assertion during promotion of replica (#1950) Fix panic in primary when blo...

Change Log

* Thu Apr 24 2025 Remi Collet - 8.0.3-1 - update to 8.0.3 fixes CVE-2025-21605

References

Fedora Update Notification FEDORA-2025-d191ee2f9a 2025-05-03 01:10:19.809477+00:00 Name : valkey Product : Fedora 41 Version : 8.0.3 Release : 1.fc41 URL : https://valkey.io Summary : A persistent key-value database Description : Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-d191ee2f9a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: valkey
Product: Fedora 41
Version: 8.0.3
Release: 1.fc41
Summary: A persistent key-value database

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here