ALT-PU-2026-13508

Высокий

ALT-PU-2026-13508: package valkey update to version 8.1.9-alt1

Источник

errata.altlinux.org

Дата публикации

23.08.2026

Дата обновления

23.08.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades valkey to version 8.1.9-alt1.

Устраненные уязвимости2

CVE-2026-56684

Высокий 7.5

Дата публикации: 18.08.2026

CWE-416

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's tlsProcessPendingData function iterates pending_list while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator's cached next node and producing a use-after-free that can crash the server or potentially allow remote code execution when TLS is enabled. This issue is fixed in versions 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1.

CVSS 3.1

Высокий 7.5

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: High
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Ссылки

CVE-2026-56684 https://nvd.nist.gov/vuln/detail/CVE-2026-56684

Ссылки1

ALT-PU-2026-13508 https://errata.altlinux.org/ALT-PU-2026-13508

Связанные уязвимости

openSUSE-SU-2026:21485-1

suse-cvrf

3 месяца назад

Security update for valkey

SUSE-SU-2026:3483-1

suse-cvrf

3 месяца назад

Security update for valkey

SUSE-SU-2026:3427-1

suse-cvrf

3 месяца назад

Security update for valkey

RLSA-2026:64807

rocky

2 месяца назад

Important: valkey security, bug fix, and enhancement update

RLSA-2026:64796

rocky

2 месяца назад

Important: valkey security, bug fix, and enhancement update