Several security issues were fixed in Valkey.. ========================================================================== Ubuntu Security Notice USN-8106-1 March 18, 2026 valkey vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: Several security issues were fixed in Valkey. Software Description: - valkey: Persistent key-value database with network interface Details: It was discovered that Valkey incorrectly handled errors for lua scripts. An attacker could possibly use this issue to inject arbitrary information into the response stream for other clients. (CVE-2025-67733) It was discovered that Valkey incorrectly handled malformed cluster bus messages. A remote attacker could possibly use this issue to cause Valkey to crash, resulting in a denial of service. (CVE-2026-21863) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 valkey-server 8.1.6+dfsg1-0ubuntu0.1 Ubuntu 24.04 LTS valkey-server 7.2.12+dfsg1-0ubuntu0.1 This update uses a new upstream release, which includes additional bug fixes. In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8106-1 CVE-2025-67733, CVE-2026-21863 Package Information: https://launchpad.net/ubuntu/+source/valkey/8.1.6+dfsg1-0ubuntu0.1 https://launchpad.net/ubuntu/+source/valkey/7.2.12+dfsg1-0ubuntu0.1 . Valkey's latest advisory details critical issues that may affect Ubuntu users. Timely updates are recommended for protection.. Ubuntu Security, Valkey Update, Denial of Service, Data Injection, Linux Security. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.