From 708c7ec9b311eb8b67d34276190b9b4f523df02c Mon Sep 17 00:00:00 2001 From: CBL-Mariner Servicing Account Date: Wed, 6 May 2026 09:00:52 +0000 Subject: [PATCH 1/2] Upgrade valkey to 8.0.8 for CVE-2026-23479, CVE-2026-25243, CVE-2026-23631 --- SPECS/valkey/valkey.signatures.json | 2 +- SPECS/valkey/valkey.spec | 5 ++++- cgmanifest.json | 4 ++-- 3 files changed, 7 insertions(+), 4 deletions(-) diff --git a/SPECS/valkey/valkey.signatures.json b/SPECS/valkey/valkey.signatures.json index cdbc7e30ac1..f953d9fc35a 100644 --- a/SPECS/valkey/valkey.signatures.json +++ b/SPECS/valkey/valkey.signatures.json @@ -1,5 +1,5 @@ { "Signatures": { - "valkey-8.0.7.tar.gz": "6f8ec2c906c72f1d6fad41611396fc077c41931cdb865920c8a6c7bdf58aad5c" + "valkey-8.0.8.tar.gz": "ad0670026c63aa6325ba88148f98323295a3db7025caa9082b26b07c6f79c41a" } } diff --git a/SPECS/valkey/valkey.spec b/SPECS/valkey/valkey.spec index 4231740d0d0..f4530ddd0f1 100644 --- a/SPECS/valkey/valkey.spec +++ b/SPECS/valkey/valkey.spec @@ -1,6 +1,6 @@ Summary: advanced key-value store Name: valkey -Version: 8.0.7 +Version: 8.0.8 Release: 1%{?dist} License: BSD Vendor: Microsoft Corporation @@ -84,6 +84,9 @@ exit 0 %config(noreplace) %attr(0640, %{name}, %{name}) %{_sysconfdir}/valkey.conf %changelog +* Wed May 06 2026 CBL-Mariner Servicing Account - 8.0.8-1 +- Auto-upgrade to 8.0.8 - for CVE-2026-23479, CVE-2026-25243, CVE-2026-23631 + * Wed Feb 25 2026 CBL-Mariner Servicing Account - 8.0.7-1 - Auto-upgrade to 8.0.7 - for CVE-2026-21863, CVE-2025-67733 diff --git a/cgmanifest.json b/cgmanifest.json index 2ab45fc853c..0e54fb18d5a 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -29956,8 +29956,8 @@ "type": "other", "other": { "name": "valkey", - "version": "8.0.7", - "downloadUrl": "https://github.com/valkey-io/valkey/archive/refs/tags/8.0.7.tar.gz" + "version": "8.0.8", + "downloadUrl": "https://github.com/valkey-io/valkey/archive/refs/tags/8.0.8.tar.gz" } } }, From 4f2c198079297a8d0d75a45e1f09e2fddd5e67a4 Mon Sep 17 00:00:00 2001 From: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com> Date: Wed, 6 May 2026 18:18:31 +0530 Subject: [PATCH 2/2] Update valkey.spec --- SPECS/valkey/valkey.spec | 1 - 1 file changed, 1 deletion(-) diff --git a/SPECS/valkey/valkey.spec b/SPECS/valkey/valkey.spec index f4530ddd0f1..4acaf0e6878 100644 --- a/SPECS/valkey/valkey.spec +++ b/SPECS/valkey/valkey.spec @@ -8,7 +8,6 @@ Distribution: Azure Linux Group: Applications/Databases URL: https://valkey.io/ Source0: https://github.com/valkey-io/valkey/archive/refs/tags/%{version}.tar.gz#/%{name}-%{version}.tar.gz -Patch0: disable-mem-defrag-tests.patch BuildRequires: gcc BuildRequires: make