diff --git a/.gitignore b/.gitignore
index 13361b6..25271f6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 /valkey-8.0.3.tar.gz
 /valkey-8.0.4.tar.gz
+/valkey-8.0.6.tar.gz
diff --git a/sources b/sources
index c1b2af6..4fa0d30 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (valkey-8.0.4.tar.gz) = 2e6969a2c791f39943fe31c9c6dc5432accc37212c586f891f997df6dc74c0329d9f7254c54842f8203c8427f903e016cd465747d221349396327649ffa340fb
+SHA512 (valkey-8.0.6.tar.gz) = 0f704ad06abab2817657abe60be6fb7c45df91cdaaa53d921e26c6f4e91a3712152a31550b876d8deba3493a6ca4b87194efd3a86cacd53906f01e845e7cb137
diff --git a/valkey.spec b/valkey.spec
index 7bb12cd..47c02ca 100644
--- a/valkey.spec
+++ b/valkey.spec
@@ -2,8 +2,8 @@
 %bcond_with tests
 
 Name:              valkey
-Version:           8.0.4
-Release:           3%{?dist}
+Version:           8.0.6
+Release:           2%{?dist}
 Summary:           A persistent key-value database
 # valkey: BSD-3-Clause
 # hiredis: BSD-3-Clause
@@ -268,6 +268,9 @@ taskset -c 1 ./runtest --clients 50 --skiptest "Active defrag - AOF loading"
 
 
 %changelog
+* Fri Oct 17 2025 Remi Collet <remi@fedoraproject.org> - 8.0.6-2
+- rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819
+
 * Tue Sep  9 2025 Remi Collet <remi@fedoraproject.org> - 8.0.4-3
 - fix ImageMode: ensure ownership of /etc/valkey