-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 24 Oct 2026 10:19:26 -0500
Source: valkey
Binary: valkey-sentinel valkey-server valkey-tools valkey-tools-dbgsym
Architecture: s390x
Version: 8.1.1+dfsg1-3+deb13u3
Distribution: trixie-security
Urgency: medium
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Lena Voytek <lena@debian.org>
Description:
 valkey-sentinel - Persistent key-value database with network interface (monitoring)
 valkey-server - Persistent key-value database with network interface
 valkey-tools - Persistent key-value database with network interface (client)
Closes: 1144956 1144957 1146641
Changes:
 valkey (8.1.1+dfsg1-3+deb13u3) trixie-security; urgency=medium
 .
   * Fix CVE-2026-56684 (Closes: #1144956)
     Valkey's tlsProcessPendingData function iterates pending_list while an
     authenticated client can trigger CLIENT KILL, causing connTLSClose to
     delete the iterator's cached next node and producing a use-after-free that
     can crash the server or potentially allow remote code execution when TLS is
     enabled.
     - d/p/CVE-2026-56684.patch
   * Fix CVE-2026-63639 (Closes: #1144957)
     Valkey's RESTORE command accepts a malformed RDB stream payload that
     assigns one Pending Entry List NACK to multiple consumers during stream
     consumer-group deserialization, causing a use-after-free when one consumer
     is deleted while another still references the shared NACK and potentially
     allowing remote code execution.
     - d/p/CVE-2026-63639.patch
   * Fix CVE-2026-82631 and CVE-2026-82677 (Closes: #1146641)
     A server-side use-after-free can occur in handleClientsBlockedOnKey.
     - d/p/CVE-2026-82631.patch
     A server-side double free can occur in moduleTimerHandler.
     - d/p/CVE-2026-82677.patch
   * Fix CVE-2026-23479
     Valkey's unblockClientOnKey function re-executes a blocked client's
     pending command and then accesses the client without checking whether it
     was freed during processing, causing a use-after-free.
     - d/p/CVE-2026-23479.patch
   * Fix CVE-2026-23631
     Valkey frees the functions/scripting engine before loading the RDB during
     a replica full sync, which can happen while a Lua script is yielding via
     the long-command mechanism, causing a use-after-free when the script
     resumes.
     - d/p/CVE-2026-23631.patch
   * Fix CVE-2026-25243
     Valkey's zipmapValidateIntegrity function accepts overlong length
     encodings that zipmapNext later interprets differently, allowing a crafted
     RESTORE payload to cause a heap buffer over-read during zipmap to listpack
     conversion.
     - d/p/CVE-2026-25243.patch
Checksums-Sha1:
 ddcfc0ce41ea8a025125c80edbf123c3d2391219 23776 valkey-sentinel_8.1.1+dfsg1-3+deb13u3_s390x.deb
 fe1fd5d2163cb717bdb401681eebd506c5cd4c39 59204 valkey-server_8.1.1+dfsg1-3+deb13u3_s390x.deb
 2acf3c21aad4b09305f9cbd715d2314b87130203 4361044 valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_s390x.deb
 e6e30e6a90962b4db9861542cd2bd9204c544aab 1186000 valkey-tools_8.1.1+dfsg1-3+deb13u3_s390x.deb
 e3871504a943cc7272c7fbce0d1fea8c3ca33aac 7512 valkey_8.1.1+dfsg1-3+deb13u3_s390x-buildd.buildinfo
Checksums-Sha256:
 489d3e4cf3af9632eb3fd0060a1e169ec24b64781fbeafe03c52436e446a89b2 23776 valkey-sentinel_8.1.1+dfsg1-3+deb13u3_s390x.deb
 2e14597c582842e094856ce967de8d12838ab7d2df7365458afeeed8ca91ecab 59204 valkey-server_8.1.1+dfsg1-3+deb13u3_s390x.deb
 01228b759ca137cb14266bf5d421aa92b65eb877c9230ca6034233ddbfea015e 4361044 valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_s390x.deb
 bc3a9852a18e78e0a68baefa02689838a9d7e08e4585bd81a1574cc31efadc41 1186000 valkey-tools_8.1.1+dfsg1-3+deb13u3_s390x.deb
 819713ae891971f520b1e2d4b0f1081d8fc1eff7372d731e294466ccf685f137 7512 valkey_8.1.1+dfsg1-3+deb13u3_s390x-buildd.buildinfo
Files:
 07f8b9ea47a8a76d10155fd5126e7578 23776 database optional valkey-sentinel_8.1.1+dfsg1-3+deb13u3_s390x.deb
 a93262ff2ac9d395418f635f0ae0e8b7 59204 database optional valkey-server_8.1.1+dfsg1-3+deb13u3_s390x.deb
 714f83befaac5fcddff6b0d28e7aba90 4361044 debug optional valkey-tools-dbgsym_8.1.1+dfsg1-3+deb13u3_s390x.deb
 6353b3ed934b2e9e996c4d7b883fc664 1186000 database optional valkey-tools_8.1.1+dfsg1-3+deb13u3_s390x.deb
 63417ef49a72796ad12f7ed5f2c1698f 7512 database optional valkey_8.1.1+dfsg1-3+deb13u3_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=bWkE
-----END PGP SIGNATURE-----