Package "valkey-redis-compat"
| Name: |
valkey-redis-compat
|
Description: |
Conversion script and compatibility symlinks for Redis
|
| Latest version: |
7.2.14+dfsg1-0ubuntu0.1 |
| Release: |
noble (24.04) |
| Level: |
proposed |
| Repository: |
universe |
| Head package: |
valkey |
| Homepage: |
https://valkey.io |
Links
Download "valkey-redis-compat"
Other versions of "valkey-redis-compat" in Noble
Changelog
|
valkey (7.2.14+dfsg1-0ubuntu0.1) noble; urgency=medium
* New upstream version 7.2.14 (LP: #2153491)
- Security fixes:
+ CVE-2026-56684: Use-after-free in TLS connection handling via
CLIENT KILL.
+ CVE-2026-63639: Reject corrupt stream RDB with shared NACK across
consumers.
- Bug fixes:
+ Strictly validate CRLF terminators when parsing RESP requests.
+ Reject malformed zipmap payloads and NAN sorted set scores in RDB
and RESTORE, and fix a double free on corrupt stream consumer groups.
+ Fix listpack corruption when XTRIM deletes the last entry of a node.
+ Fix Lua VM crash after FUNCTION FLUSH ASYNC and uninitialized memory
use in FUNCTION LOAD.
+ Fix lua-enable-insecure-api having no effect when set at startup.
+ Fix use-after-free and NULL key crashes in module cluster message
receivers and LRU/LFU APIs.
+ Fix NULL pointer crash in TLS pending-data handling.
+ Fix memory leak in ZDIFF and fd leak on connect timeout.
+ Return COMMAND INFO subcommands as an Array in RESP3.
+ Reject control characters in SENTINEL SET, cluster AUX fields and
cluster-announce-ip.
+ Log real error on replication sync I/O failures.
+ Fix startup crash on 32-bit systems with 64-bit time_t and raise the
maximum process title length.
+ Improve valkey-cli --cluster del-node and --cluster fix.
-- Lena Voytek Tue, 13 Oct 2026 15:05:44 -0400
|
| 2153491 |
Update Valkey to 7.2.14 in noble, 9.0.6 in resolute, and 9.1.2 in stonking |
| CVE-2026-56684 |
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pendin |
| CVE-2026-63639 |
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream |
|
|
No changelog for deleted or moved packages.
|
|
valkey (7.2.13+dfsg1-0ubuntu0.1) noble; urgency=medium
* New upstream version 7.2.13 (LP: #2151296)
- Security fixes:
+ CVE-2026-23479: Use-After-Free in unblock client flow.
+ CVE-2026-25243: Invalid Memory Access in RESTORE command.
+ CVE-2026-23631: Use-after-free when full sync occurs during a yielding
Lua/function execution.
-- Lena Voytek <email address hidden> Thu, 04 Jun 2026 09:54:12 -0400
|
| 2151296 |
Update Valkey to 7.2.13 in noble, 8.1.7 in questing, and 9.0.4 in resolute and stonking |
| CVE-2026-23479 |
Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `pro |
| CVE-2026-25243 |
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values |
| CVE-2026-23631 |
Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-repl |
|
|
No changelog for deleted or moved packages.
|
|
valkey (7.2.12+dfsg1-0ubuntu0.1) noble; urgency=medium
* New upstream version 7.2.12 (LP: #2142590)
- Security fixes:
+ CVE-2025-67733: RESP Protocol Injection via Lua error_reply.
+ CVE-2026-21863: Remote DoS with malformed Valkey Cluster bus message.
- Bug fixes:
+ Fix ltrim should not call signalModifiedKey when no elements are
removed.
+ Fix potential infinite loop in clusterNodeGetMaster.
+ Avoids crash during MODULE UNLOAD when ACL rules reference a module
command and subcommand.
-- Lena Voytek <email address hidden> Tue, 24 Feb 2026 09:01:01 -0500
|
| 2142590 |
Update Valkey to 7.2.12 in noble, 8.1.6 in questing, and 9.0.3 in resolute |
| CVE-2025-67733 |
Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject |
| CVE-2026-21863 |
Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus |
|
About
-
Send Feedback to @ubuntu_updates
