-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 10:19:26 -0500
Source: valkey
Binary: valkey-sentinel valkey-server valkey-tools valkey-tools-dbgsym
Architecture: ppc64el
Version: 8.1.1+dfsg1-3+deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) <buildd_ppc64el-ppc64el-osuosl-01@buildd.debian.org>
Changed-By: Lena Voytek <lena@debian.org>
Description:
 valkey-sentinel - Persistent key-value database with network interface (monitoring)
 valkey-server - Persistent key-value database with network interface
 valkey-tools - Persistent key-value database with network interface (client)
Closes: 1144956 1144957 1146641
Changes:
 valkey (8.1.1+dfsg1-3+deb13u3) trixie-security; urgency=medium
 .
   * Fix CVE-2026-56684 (Closes: #1144956)
     Valkey's tlsProcessPendingData function iterates pending_list while an
     authenticated client can trigger CLIENT KILL, causing connTLSClose to
     delete the iterator's cached next node and producing a use-after-free that
     can crash the server or potentially allow remote code execution when TLS is
     enabled.
     - d/p/CVE-2026-56684.patch
   * Fix CVE-2026-63639 (Closes: #1144957)
     Valkey's RESTORE command accepts a malformed RDB stream payload that
     assigns one Pending Entry List NACK to multiple consumers during stream
     consumer-group deserialization, causing a use-after-free when one consumer
     is deleted while another still references the shared NACK and potentially
     allowing remote code execution.
     - d/p/CVE-2026-63639.patch
   * Fix CVE-2026-82631 and CVE-2026-82677 (Closes: #1146641)
     A server-side use-after-free can occur in handleClientsBlockedOnKey.
     - d/p/CVE-2026-82631.patch
     A server-side double free can occur in moduleTimerHandler.
     - d/p/CVE-2026-82677.patch
   * Fix CVE-2026-23479
     Valkey's unblockClientOnKey function re-executes a blocked client's
     pending command and then accesses the client without checking whether it
     was freed during processing, causing a use-after-free.
     - d/p/CVE-2026-23479.patch
   * Fix CVE-2026-23631
     Valkey frees the functions/scripting engine before loading the RDB during
     a replica full sync, which can happen while a Lua script is yielding via
     the long-command mechanism, causing a use-after-free when the script
     resumes.
     - d/p/CVE-2026-23631.patch
   * Fix CVE-2026-25243
     Valkey's zipmapValidateIntegrity function accepts overlong length
     encodings that zipmapNext later interprets differently, allowing a crafted
     RESTORE payload to cause a heap buffer over-read during zipmap to listpack
     conversion.
     - d/p/CVE-2026-25243.patch
Checksums-Sha1:
 d4bf51722670fda1ba06a7bb743edf65cdefe219 23776 valkey-sentinel_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 89bb41221eb88bd61ae10374dd847a6c0fc82211 59208 valkey-server_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 f592ed879965a6a5242cb12b1312176ae9d61e19 4381384 valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 47128ce7c23c36e9037e5a473147f9aace671c7f 1280860 valkey-tools_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 5532549913b3f0cd9fefb2d2765d2fd0f229f1d5 7661 valkey_8.1.1+dfsg1-3+deb13u3_ppc64el-buildd.buildinfo
Checksums-Sha256:
 2f4db4f89cf0d345ad460112810d53607f99b144f506f928354065524ff664ce 23776 valkey-sentinel_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 da6cf4be65945393ccabaf03c1c17bfff6d302d57b2d232f54ff2aa4d91f6ec6 59208 valkey-server_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 df6d00d656cdbd656a76fbad29c61cd2b84c8827ae417c69ff646cfdc72e9b10 4381384 valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 687b4f49114459299fdf2cc046091ba1292ba7505f2410fab6c0957f3f386663 1280860 valkey-tools_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 c7d462ec6a33caccdfd12923dcf96f1cc302e5d725abb10535662829174c2ae9 7661 valkey_8.1.1+dfsg1-3+deb13u3_ppc64el-buildd.buildinfo
Files:
 5ad6c14dee8bd6177e93ed08a73fad48 23776 database optional valkey-sentinel_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 f91dd6e91a2f89e475c5dd7c4552f7c0 59208 database optional valkey-server_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 5a8eb2ae19ab98976939bd2b955c2322 4381384 debug optional valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 80f0dc96cf06637684d66ceefd1e0915 1280860 database optional valkey-tools_8.1.1+dfsg1-3+deb13u3_ppc64el.deb
 b9321bef0668f2668e71d4b320690808 7661 database optional valkey_8.1.1+dfsg1-3+deb13u3_ppc64el-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=vWCz
-----END PGP SIGNATURE-----