GSA-6586-1: Valkey Security Update
Gnoppix Security published GSA-6586-1 to address a security vulnerability in Valkey, a high-performance key-value store. A remote attacker can exploit the flaw to crash the server, causing a denial of service. Patched packages are available for all supported Gnoppix releases.
Affected Releases
- Gnoppix 24/25 (oldstable): affected, patched version available.
- Gnoppix 26 (stable): affected, patched version available.
- Gnoppix 27 (testing): affected, patched version available.
Vulnerability Overview
The vulnerability affects Valkey’s command handling. A crafted request triggers an incorrect error path and terminates the process. The attack is remotely exploitable and requires no authentication.
This is a remote denial-of-service risk. No workaround exists.
Remediation
Upgrade Valkey to the fixed version from the Gnoppix security repository using standard update procedures.
- Update package lists:
apt update - Upgrade Valkey:
apt upgrade valkey - Restart the service:
systemctl restart valkey
For full details, refer to the official Gnoppix security announcement. - Please update your systems.