Ubuntu 7359-1: Valkey Security Advisory Updates
ubuntu
March 20, 2025
Several security issues were fixed in Valkey.
Summary
Several security issues were fixed in Valkey.
Software Description:
- valkey: Conversion script and compatibility symlinks for Redis
Details:
It was discovered that Valkey did not properly handle memory
cleanup. An attacker could possibly use this issue to execute
arbitrary code. (CVE-2024-46981)
It was discovered that Valkey did not properly handle resource
access permissions. An authenticated attacker could possibly
use this issue to cause a denial of service. (CVE-2024-51741)
Topics Covered
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 24.10 valkey-redis-compat 7.2.8+dfsg1-0ubuntu0.24.10.2 valkey-sentinel 7.2.8+dfsg1-0ubuntu0.24.10.2 valkey-server 7.2.8+dfsg1-0ubuntu0.24.10.2 valkey-tools 7.2.8+dfsg1-0ubuntu0.24.10.2 Ubuntu 24.04 LTS valkey-redis-compat 7.2.8+dfsg1-0ubuntu0.24.04.2 valkey-sentinel 7.2.8+dfsg1-0ubuntu0.24.04.2 valkey-server 7.2.8+dfsg1-0ubuntu0.24.04.2 valkey-tools 7.2.8+dfsg1-0ubuntu0.24.04.2 In general, a standard system update will make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-7359-1
CVE-2024-46981, CVE-2024-51741
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!