-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 10:19:26 -0500
Source: valkey
Binary: valkey-sentinel valkey-server valkey-tools valkey-tools-dbgsym
Architecture: armel
Version: 8.1.1+dfsg1-3+deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: armel Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Lena Voytek <lena@debian.org>
Description:
 valkey-sentinel - Persistent key-value database with network interface (monitoring)
 valkey-server - Persistent key-value database with network interface
 valkey-tools - Persistent key-value database with network interface (client)
Closes: 1144956 1144957 1146641
Changes:
 valkey (8.1.1+dfsg1-3+deb13u3) trixie-security; urgency=medium
 .
   * Fix CVE-2026-56684 (Closes: #1144956)
     Valkey's tlsProcessPendingData function iterates pending_list while an
     authenticated client can trigger CLIENT KILL, causing connTLSClose to
     delete the iterator's cached next node and producing a use-after-free that
     can crash the server or potentially allow remote code execution when TLS is
     enabled.
     - d/p/CVE-2026-56684.patch
   * Fix CVE-2026-63639 (Closes: #1144957)
     Valkey's RESTORE command accepts a malformed RDB stream payload that
     assigns one Pending Entry List NACK to multiple consumers during stream
     consumer-group deserialization, causing a use-after-free when one consumer
     is deleted while another still references the shared NACK and potentially
     allowing remote code execution.
     - d/p/CVE-2026-63639.patch
   * Fix CVE-2026-82631 and CVE-2026-82677 (Closes: #1146641)
     A server-side use-after-free can occur in handleClientsBlockedOnKey.
     - d/p/CVE-2026-82631.patch
     A server-side double free can occur in moduleTimerHandler.
     - d/p/CVE-2026-82677.patch
   * Fix CVE-2026-23479
     Valkey's unblockClientOnKey function re-executes a blocked client's
     pending command and then accesses the client without checking whether it
     was freed during processing, causing a use-after-free.
     - d/p/CVE-2026-23479.patch
   * Fix CVE-2026-23631
     Valkey frees the functions/scripting engine before loading the RDB during
     a replica full sync, which can happen while a Lua script is yielding via
     the long-command mechanism, causing a use-after-free when the script
     resumes.
     - d/p/CVE-2026-23631.patch
   * Fix CVE-2026-25243
     Valkey's zipmapValidateIntegrity function accepts overlong length
     encodings that zipmapNext later interprets differently, allowing a crafted
     RESTORE payload to cause a heap buffer over-read during zipmap to listpack
     conversion.
     - d/p/CVE-2026-25243.patch
Checksums-Sha1:
 383f9ef388c19028cecf1f00dafb0bed89ac9de6 23776 valkey-sentinel_8.1.1+dfsg1-3+deb13u3_armel.deb
 d4b9a26c90cffbcf54f70f0d8bb4d3565d08bc19 59204 valkey-server_8.1.1+dfsg1-3+deb13u3_armel.deb
 a2ee831304f4c488568a1b0ccaa925df40093822 4227360 valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_armel.deb
 1829dc9776563fb8b87eb0fe36490631b96a9fda 1086936 valkey-tools_8.1.1+dfsg1-3+deb13u3_armel.deb
 c16b22c5cb1e98b80b57362972e4973fa9631f61 7502 valkey_8.1.1+dfsg1-3+deb13u3_armel-buildd.buildinfo
Checksums-Sha256:
 9be510264621984f8d43e1388216ebfba6e8835157e39855a4f53f3e9ded81ff 23776 valkey-sentinel_8.1.1+dfsg1-3+deb13u3_armel.deb
 e9f892ff8baeafcce2200c94e979a6ab588e637afdbc9a579c5678267d82ab62 59204 valkey-server_8.1.1+dfsg1-3+deb13u3_armel.deb
 6fe1b64aad437fc7f40dd2d2e3cc4d5a854b47eb5d013f4c2326c38f25c93d80 4227360 valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_armel.deb
 6e1ce5ec91b986f40e7c478acdef5f8cccbea50d91507f1d88570061a83ac2ec 1086936 valkey-tools_8.1.1+dfsg1-3+deb13u3_armel.deb
 8bf661c329f70f989e6c7e75994b381bb71b9a5cc93015dcd8c3617ae8fceee2 7502 valkey_8.1.1+dfsg1-3+deb13u3_armel-buildd.buildinfo
Files:
 7cf31684234d9fe3b7c4ad8a5a8db0ef 23776 database optional valkey-sentinel_8.1.1+dfsg1-3+deb13u3_armel.deb
 f6e62b6e5e55c3662e94a9f395d68c43 59204 database optional valkey-server_8.1.1+dfsg1-3+deb13u3_armel.deb
 e5f9bb96af773aebe6e7429a5573bb7c 4227360 debug optional valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_armel.deb
 5a2c04cdf2a7efef20a3ed24bf092078 1086936 database optional valkey-tools_8.1.1+dfsg1-3+deb13u3_armel.deb
 92c9a53b048a71a8e3d1a685b205c1b5 7502 database optional valkey_8.1.1+dfsg1-3+deb13u3_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=U5gW
-----END PGP SIGNATURE-----