-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 10:19:26 -0500
Source: valkey
Binary: valkey-sentinel valkey-server valkey-tools valkey-tools-dbgsym
Architecture: riscv64
Version: 8.1.1+dfsg1-3+deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-manda-02) <buildd_riscv64-rv-manda-02@buildd.debian.org>
Changed-By: Lena Voytek <lena@debian.org>
Description:
 valkey-sentinel - Persistent key-value database with network interface (monitoring)
 valkey-server - Persistent key-value database with network interface
 valkey-tools - Persistent key-value database with network interface (client)
Closes: 1144956 1144957 1146641
Changes:
 valkey (8.1.1+dfsg1-3+deb13u3) trixie-security; urgency=medium
 .
   * Fix CVE-2026-56684 (Closes: #1144956)
     Valkey's tlsProcessPendingData function iterates pending_list while an
     authenticated client can trigger CLIENT KILL, causing connTLSClose to
     delete the iterator's cached next node and producing a use-after-free that
     can crash the server or potentially allow remote code execution when TLS is
     enabled.
     - d/p/CVE-2026-56684.patch
   * Fix CVE-2026-63639 (Closes: #1144957)
     Valkey's RESTORE command accepts a malformed RDB stream payload that
     assigns one Pending Entry List NACK to multiple consumers during stream
     consumer-group deserialization, causing a use-after-free when one consumer
     is deleted while another still references the shared NACK and potentially
     allowing remote code execution.
     - d/p/CVE-2026-63639.patch
   * Fix CVE-2026-82631 and CVE-2026-82677 (Closes: #1146641)
     A server-side use-after-free can occur in handleClientsBlockedOnKey.
     - d/p/CVE-2026-82631.patch
     A server-side double free can occur in moduleTimerHandler.
     - d/p/CVE-2026-82677.patch
   * Fix CVE-2026-23479
     Valkey's unblockClientOnKey function re-executes a blocked client's
     pending command and then accesses the client without checking whether it
     was freed during processing, causing a use-after-free.
     - d/p/CVE-2026-23479.patch
   * Fix CVE-2026-23631
     Valkey frees the functions/scripting engine before loading the RDB during
     a replica full sync, which can happen while a Lua script is yielding via
     the long-command mechanism, causing a use-after-free when the script
     resumes.
     - d/p/CVE-2026-23631.patch
   * Fix CVE-2026-25243
     Valkey's zipmapValidateIntegrity function accepts overlong length
     encodings that zipmapNext later interprets differently, allowing a crafted
     RESTORE payload to cause a heap buffer over-read during zipmap to listpack
     conversion.
     - d/p/CVE-2026-25243.patch
Checksums-Sha1:
 a8be778f558096ae0f7f099415ced0c148e61c6e 23776 valkey-sentinel_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 fa68d452d96012dee2f8801cd0348e8e0fc85f74 59208 valkey-server_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 8079238cdb53f085b660582f97f0097ac8908c69 4455564 valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 6ae460272860c51b071daa31e2b36e1ea25a80bf 1280512 valkey-tools_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 99b1ba0ae6e956e76744d7595c373d3ed92da5fe 7606 valkey_8.1.1+dfsg1-3+deb13u3_riscv64-buildd.buildinfo
Checksums-Sha256:
 2a6cf67e3a2647f51379457e439bdf5003fc89beebb546faa2267415dc573b81 23776 valkey-sentinel_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 b97f181bd34426759ec5b20bb375494df61d1d4b4adbdfd3b58d8da258d231ef 59208 valkey-server_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 627a513f0f3de26200400b3e518909a906fd62547b283bed06255d7c43208352 4455564 valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 ffeb647dc4bd28ca353680df8576443b8f273df1e16cda23e1aec530f79dc581 1280512 valkey-tools_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 06b88e1353d70dfec6eed41b5f00ee5cf341cf6e9bc831ccc741e74d3f6f08d6 7606 valkey_8.1.1+dfsg1-3+deb13u3_riscv64-buildd.buildinfo
Files:
 7093149036d5636095803960be4c391f 23776 database optional valkey-sentinel_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 9d536346c2322c40955d1f084e2d0adc 59208 database optional valkey-server_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 1bc8b9e37f4ec7d073d84e33566fccad 4455564 debug optional valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 32e8302db76ea73c7fd1ee9855821c65 1280512 database optional valkey-tools_8.1.1+dfsg1-3+deb13u3_riscv64.deb
 fa44593b37da1577cfdb7a624398000b 7606 database optional valkey_8.1.1+dfsg1-3+deb13u3_riscv64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEER+evXFzNzDWbUDPF7SlJcp2g6OIFAmrf3cAACgkQ7SlJcp2g
6OJYbA/8CN1P539jdlSig8o/qJ236zlgp3YY34IeXdHiTnlTY5rDlc7xRiSy45dF
AJhvK10pXJrIat8Vw+1XNRL9GN4i0kFiQJtMcgwXHqh9MZ4dKsHm65ZGb+523TPX
de3VB4WPTaflCR1Xn5k+DLeQoQ6wi/7IR0snM9YAXSMhR90cb62T1KoGuku/O+oJ
Kj3C278AdeKexEYmaP+h72lpj6JHDWfb1GJxoGl+p7JDV/9/sLW3PdK+fzTLxcOI
5JjntpYJTqIVSxjrrTXjtXeADxrEM0KjN9Ba4Sz2xrULT4tvCYuJjTepl8esye2b
sJYpTMndROs5sbUZLzmdsaumMX4fh/kGiayOdFNoCc4GacNBRTleYI/dzuk/u2Yt
6NBwIwUN2ByrkF6jFhCmPUCU2gsM9NHdIaAl4ZDwBknyKiara6Ue3Tp/qU1r0U0/
FAEiFWtIP009nf2tgNcfpGhiflCGfdAELtSsRBUazgFwHAmHiQEkXU+p/KP3ihvp
Ii0OFpi8uZ/WLwOlXezbcltoi3+HcdEuzf7AEG/CLfnXBJhtFKX8VRdHd7nL82EP
/UgPhs2wT0R/v8fkkHfKV2IHYxvPg9K4d0gZ5T7OiYtlPIQN06q+hTK6OIt3wFYW
qVbORxrzY3soKH4iB5t+Gg+abXph7T+VlU4oz1YqWXTWOgqdX08=
=+6QR
-----END PGP SIGNATURE-----