[AUTO-CHERRYPICK] [High] Update valkey to fix CVE-2025-32023, CVE-2025-48367 - branch 3.0-dev (#14389)

Co-authored-by: Kevin Lockwood <[email protected]>
Co-authored-by: Kanishk Bansal <[email protected]>
Co-authored-by: jslobodzian <[email protected]>

Author: 4 people

SPECS/valkey/valkey.signatures.json

@@ -1,5 +1,5 @@
 {
-  "Signatures": {
-    "valkey-8.0.3.tar.gz": "9141b6a91572e714fae8bc01e5031828ac6a8eb8e012e6836673d18dbfe4a47b"
-  }
-}
+ "Signatures": {
+  "valkey-8.0.4.tar.gz": "55c12a25f67ef19b615c76b6cb0c92d12753d76eb8d38b31d30e299c3490cdf2"
+ }
+}

SPECS/valkey/valkey.spec

@@ -1,7 +1,7 @@
 Summary:        advanced key-value store
 Name:           valkey
-Version:        8.0.3
-Release:        3%{?dist}
+Version:        8.0.4
+Release:        1%{?dist}
 License:        BSD
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -86,6 +86,9 @@ exit 0
 %config(noreplace) %attr(0640, %{name}, %{name}) %{_sysconfdir}/valkey.conf
 
 %changelog
+* Tue Jul 22 2025 Kevin Lockwood <[email protected]> - 8.0.4-1
+- Upgrade to 8.0.4 to fix CVE-2025-32023, CVE-2025-48367
+
 * Wed Jun 18 2025 Sumit Jena <[email protected]> - 8.0.3-3
 - Fix CVE-2025-27151
 

cgmanifest.json

@@ -29666,8 +29666,8 @@
         "type": "other",
         "other": {
           "name": "valkey",
-          "version": "8.0.3",
-          "downloadUrl": "https://github.com/valkey-io/valkey/archive/refs/tags/8.0.3.tar.gz"
+          "version": "8.0.4",
+          "downloadUrl": "https://github.com/valkey-io/valkey/archive/refs/tags/8.0.4.tar.gz"
         }
       }
     },