Amazon Linux 2023 Security Advisory: ALAS2023-2025-1067
Advisory Released Date: 2025-07-10
Advisory Updated Date: 2025-07-10
Severity:
Important
Issue Overview:
Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on the heap, which could lead to remote code execution. (CVE-2025-32023)
Redis and Valkey contain a defect such that a well constructed hyperloglog can corrupt arbitrary memory on the heap, which could lead to remote code execution. (CVE-2025-48367)
Affected Packages:
valkey
Issue Correction:
Run dnf update valkey --releasever 2023.8.20250707 to update your system.
New Packages:
aarch64:
valkey-devel-8.0.3-3.amzn2023.0.4.aarch64
valkey-debuginfo-8.0.3-3.amzn2023.0.4.aarch64
valkey-8.0.3-3.amzn2023.0.4.aarch64
valkey-debugsource-8.0.3-3.amzn2023.0.4.aarch64
src:
valkey-8.0.3-3.amzn2023.0.4.src
x86_64:
valkey-devel-8.0.3-3.amzn2023.0.4.x86_64
valkey-debuginfo-8.0.3-3.amzn2023.0.4.x86_64
valkey-8.0.3-3.amzn2023.0.4.x86_64
valkey-debugsource-8.0.3-3.amzn2023.0.4.x86_64