Red Hat Product Errata RHSA-2026:25925 - Security Advisory Issued: 2026-06-15 Updated: 2026-06-15 RHSA-2026:25925 - Security Advisory Overview Updated Packages Synopsis Important: valkey security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for valkey is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also. Security Fix(es): redis: use-after-free in unblock client flow may allow remote code execution (CVE-2026-23479) redis: Remote code execution via use-after-free in Lua scripting (CVE-2026-23631) redis: RESTORE invalid memory access may allow remote code execution (CVE-2026-25243) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2466780 - CVE-2026-23479 redis: use-after-free in unblock client flow may allow remote code execution BZ - 2466788 - CVE-2026-23631 redis: Remote code execution via use-after-free in Lua scripting BZ - 2466828 - CVE-2026-25243 redis: RESTORE invalid memory access may allow remote code execution CVEs CVE-2026-23479 CVE-2026-23631 CVE-2026-25243 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM valkey-8.0.9-1.el9_8.src.rpm SHA-256: 54f03e00d63f283814ea6b2f64ed733044a0b11e8a5fabc3ba51c5c22b152813 x86_64 valkey-8.0.9-1.el9_8.x86_64.rpm SHA-256: 1f4397a7a049ad836d885ba64be450a564ba4ce5d8673c23b0032b2cfde596ea valkey-debuginfo-8.0.9-1.el9_8.x86_64.rpm SHA-256: d1cf792f15eaa6e76bf2be29c2a14084623a322f758b5f887c5b44a066bd4ff7 valkey-debugsource-8.0.9-1.el9_8.x86_64.rpm SHA-256: f35e6b90486c91ec915ec668029920a53f0d79edc2bf8699939ebd647f2b4f7a valkey-devel-8.0.9-1.el9_8.x86_64.rpm SHA-256: bd1775bc7f4154303520f2a6978e8df5c6660a6119ab8b82052f216a9bebe2ad Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM valkey-8.0.9-1.el9_8.src.rpm SHA-256: 54f03e00d63f283814ea6b2f64ed733044a0b11e8a5fabc3ba51c5c22b152813 x86_64 valkey-8.0.9-1.el9_8.x86_64.rpm SHA-256: 1f4397a7a049ad836d885ba64be450a564ba4ce5d8673c23b0032b2cfde596ea valkey-debuginfo-8.0.9-1.el9_8.x86_64.rpm SHA-256: d1cf792f15eaa6e76bf2be29c2a14084623a322f758b5f887c5b44a066bd4ff7 valkey-debugsource-8.0.9-1.el9_8.x86_64.rpm SHA-256: f35e6b90486c91ec915ec668029920a53f0d79edc2bf8699939ebd647f2b4f7a valkey-devel-8.0.9-1.el9_8.x86_64.rpm SHA-256: bd1775bc7f4154303520f2a6978e8df5c6660a6119ab8b82052f216a9bebe2ad Red Hat Enterprise Linux for IBM z Systems 9 SRPM valkey-8.0.9-1.el9_8.src.rpm SHA-256: 54f03e00d63f283814ea6b2f64ed733044a0b11e8a5fabc3ba51c5c22b152813 s390x valkey-8.0.9-1.el9_8.s390x.rpm SHA-256: e07c7afbe74aa787b2af9c733dda354917f4ddce7d4513b5c60435a84fd830b7 valkey-debuginfo-8.0.9-1.el9_8.s390x.rpm SHA-256: 85bd826e085e0cef3ae7c04b6fb5e2ac677f285cf49e3bc0e24b18dc73705c30 valkey-debugsource-8.0.9-1.el9_8.s390x.rpm SHA-256: 4a553dfa971b87e319c959369cf3cdf194e326c4541f9acdd642894a4a9a0c7b valkey-devel-8.0.9-1.el9_8.s390x.rpm SHA-256: 11c6a5453a92e648fc11d4833ffad026f7cf9f78bafb5c3bbaa904e4a97e6fe8 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM valkey-8.0.9-1.el9_8.src.rpm SHA-256: 54f03e00d63f283814ea6b2f64ed733044a0b11e8a5fabc3ba51c5c22b152813 s390x valkey-8.0.9-1.el9_8.s390x.rpm SHA-256: e07c7afbe74aa787b2af9c733dda354917f4ddce7d4513b5c60435a84fd830b7 valkey-debuginfo-8.0.9-1.el9_8.s390x.rpm SHA-256: 85bd826e085e0cef3ae7c04b6fb5e2ac677f285cf49e3bc0e24b18dc73705c30 valkey-debugsource-8.0.9-1.el9_8.s390x.rpm SHA-256: 4a553dfa971b87e319c959369cf3cdf194e326c4541f9acdd642894a4a9a0c7b valkey-devel-8.0.9-1.el9_8.s390x.rpm SHA-256: 11c6a5453a92e648fc11d4833ffad026f7cf9f78bafb5c3bbaa904e4a97e6fe8 Red Hat Enterprise Linux for Power, little endian 9 SRPM valkey-8.0.9-1.el9_8.src.rpm SHA-256: 54f03e00d63f283814ea6b2f64ed733044a0b11e8a5fabc3ba51c5c22b152813 ppc64le valkey-8.0.9-1.el9_8.ppc64le.rpm SHA-256: 23fdc2730e0b329231a81550be5ae518f628063c31a8d0076d13e5bf74787340 valkey-debuginfo-8.0.9-1.el9_8.ppc64le.rpm SHA-256: ce1af75c4117667fd45f3cee5d53a2c926534c207203de063bd1401386617eee valkey-debugsource-8.0.9-1.el9_8.ppc64le.rpm SHA-256: 6917d173a3791d460f34957b298cd66859f26eaf62062918146d951b16c23938 valkey-devel-8.0.9-1.el9_8.ppc64le.rpm SHA-256: 97c5dca1add5fbe8aab6c9e4ad3cd608df04fc75ad8249f7ec00add51561544e Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM valkey-8.0.9-1.el9_8.src.rpm SHA-256: 54f03e00d63f283814ea6b2f64ed733044a0b11e8a5fabc3ba51c5c22b152813 ppc64le valkey-8.0.9-1.el9_8.ppc64le.rpm SHA-256: 23fdc2730e0b329231a81550be5ae518f628063c31a8d0076d13e5bf74787340 valkey-debuginfo-8.0.9-1.el9_8.ppc64le.rpm SHA-256: ce1af75c4117667fd45f3cee5d53a2c926534c207203de063bd1401386617eee valkey-debugsource-8.0.9-1.el9_8.ppc64le.rpm SHA-256: 6917d173a3791d460f34957b298cd66859f26eaf62062918146d951b16c23938 valkey-devel-8.0.9-1.el9_8.ppc64le.rpm SHA-256: 97c5dca1add5fbe8aab6c9e4ad3cd608df04fc75ad8249f7ec00add51561544e Red Hat Enterprise Linux for ARM 64 9 SRPM valkey-8.0.9-1.el9_8.src.rpm SHA-256: 54f03e00d63f283814ea6b2f64ed733044a0b11e8a5fabc3ba51c5c22b152813 aarch64 valkey-8.0.9-1.el9_8.aarch64.rpm SHA-256: e6cb960c7832e246e78a5967caf9ee515c89cdb2d644cc6f110562b3a27bb77d valkey-debuginfo-8.0.9-1.el9_8.aarch64.rpm SHA-256: 799bd1d5966a72f3eaa1de0d325069aa0c3a164ebb45670084560708e5e9831c valkey-debugsource-8.0.9-1.el9_8.aarch64.rpm SHA-256: def12f147fbeec00098ecadda5a9251f49c3bf70a9085c24c3248f407de76777 valkey-devel-8.0.9-1.el9_8.aarch64.rpm SHA-256: 531ced86cac878db6d9114bacdfc745919e183022628d2f17c2c72e369f8c263 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM valkey-8.0.9-1.el9_8.src.rpm SHA-256: 54f03e00d63f283814ea6b2f64ed733044a0b11e8a5fabc3ba51c5c22b152813 aarch64 valkey-8.0.9-1.el9_8.aarch64.rpm SHA-256: e6cb960c7832e246e78a5967caf9ee515c89cdb2d644cc6f110562b3a27bb77d valkey-debuginfo-8.0.9-1.el9_8.aarch64.rpm SHA-256: 799bd1d5966a72f3eaa1de0d325069aa0c3a164ebb45670084560708e5e9831c valkey-debugsource-8.0.9-1.el9_8.aarch64.rpm SHA-256: def12f147fbeec00098ecadda5a9251f49c3bf70a9085c24c3248f407de76777 valkey-devel-8.0.9-1.el9_8.aarch64.rpm SHA-256: 531ced86cac878db6d9114bacdfc745919e183022628d2f17c2c72e369f8c263 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM valkey-8.0.9-1.el9_8.src.rpm SHA-256: 54f03e00d63f283814ea6b2f64ed733044a0b11e8a5fabc3ba51c5c22b152813 ppc64le valkey-8.0.9-1.el9_8.ppc64le.rpm SHA-256: 23fdc2730e0b329231a81550be5ae518f628063c31a8d0076d13e5bf74787340 valkey-debuginfo-8.0.9-1.el9_8.ppc64le.rpm SHA-256: ce1af75c4117667fd45f3cee5d53a2c926534c207203de063bd1401386617eee valkey-debugsource-8.0.9-1.el9_8.ppc64le.rpm SHA-256: 6917d173a3791d460f34957b298cd66859f26eaf62062918146d951b16c23938 valkey-devel-8.0.9-1.el9_8.ppc64le.rpm SHA-256: 97c5dca1add5fbe8aab6c9e4ad3cd608df04fc75ad8249f7ec00add51561544e Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM valkey-8.0.9-1.el9_8.src.rpm SHA-256: 54f03e00d63f283814ea6b2f64ed733044a0b11e8a5fabc3ba51c5c22b152813 x86_64 valkey-8.0.9-1.el9_8.x86_64.rpm SHA-256: 1f4397a7a049ad836d885ba64be450a564ba4ce5d8673c23b0032b2cfde596ea va