[ubuntu/resolute-proposed] valkey 9.0.3-0ubuntu1 (Accepted)

[Lena Voytek]

valkey (9.0.3-0ubuntu1) resolute; urgency=medium

  * New upstream version 9.0.3 (LP: #2142590)
    - Security fixes:
        + CVE-2025-67733: RESP Protocol Injection via Lua error_reply.
        + CVE-2026-21863: Remote DoS with malformed Valkey Cluster bus message.
        + CVE-2026-27623: Reset request type after handling empty requests.
    - Bug fixes:
        + Avoid crash during MODULE UNLOAD when ACL rules reference a module
          command and subcommand.
        + Fix server assert on ACL LOAD when current user loses permission to
          channels.
        + Fix bug causing no response flush sometimes when IO threads are busy.

Date: Tue, 24 Feb 2026 08:20:13 -0500
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/valkey/9.0.3-0ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 24 Feb 2026 08:20:13 -0500
Source: valkey
Built-For-Profiles: noudeb
Architecture: source
Version: 9.0.3-0ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Lena Voytek <lena.voytek at canonical.com>
Launchpad-Bugs-Fixed: 2142590
Changes:
 valkey (9.0.3-0ubuntu1) resolute; urgency=medium
 .
   * New upstream version 9.0.3 (LP: #2142590)
     - Security fixes:
         + CVE-2025-67733: RESP Protocol Injection via Lua error_reply.
         + CVE-2026-21863: Remote DoS with malformed Valkey Cluster bus message.
         + CVE-2026-27623: Reset request type after handling empty requests.
     - Bug fixes:
         + Avoid crash during MODULE UNLOAD when ACL rules reference a module
           command and subcommand.
         + Fix server assert on ACL LOAD when current user loses permission to
           channels.
         + Fix bug causing no response flush sometimes when IO threads are busy.
Checksums-Sha1:
 a37fda794b7f0f43da2056242599c75915e72378 2316 valkey_9.0.3-0ubuntu1.dsc
 4d63281aec741187259ead3a166b66c9811d3a9f 4126098 valkey_9.0.3.orig.tar.gz
 70f5ee1fb9ef31c4f4f6d3162af5ff21da191c74 20440 valkey_9.0.3-0ubuntu1.debian.tar.xz
 2f71091d79fef3d3b571eb57866402ef067e06f5 8481 valkey_9.0.3-0ubuntu1_source.buildinfo
Checksums-Sha256:
 89e4e84feeb6503c1fa93d3462216cf93d71b33983fc559ccdf67f299ea96048 2316 valkey_9.0.3-0ubuntu1.dsc
 e220f4b0143292ee6ea6d705aa40d45a0c8a77759b3e94c201cb5c25dbdca42f 4126098 valkey_9.0.3.orig.tar.gz
 7d6d7934b66e43958e7825bf0e67659e12dd16dcf34ebaa012c8112b8e7f8c89 20440 valkey_9.0.3-0ubuntu1.debian.tar.xz
 0221ed352c084dbc199e78f4a46f090e758870f475b3a661b9b8e697cd77104f 8481 valkey_9.0.3-0ubuntu1_source.buildinfo
Files:
 1fda6285e7e8a8c67d53b9253c64298b 2316 database optional valkey_9.0.3-0ubuntu1.dsc
 be9c2d9955bcfc239cd7210a9a71f589 4126098 database optional valkey_9.0.3.orig.tar.gz
 04663aa5ec188b3801350ee7b76d2229 20440 database optional valkey_9.0.3-0ubuntu1.debian.tar.xz
 6a8988c3855aa0b4638a2b82a50ac165 8481 database optional valkey_9.0.3-0ubuntu1_source.buildinfo
Original-Maintainer: Lucas Kanashiro <kanashiro at debian.org>
Vcs-Git: https://git.launchpad.net/~lvoytek/ubuntu/+source/valkey
Vcs-Git-Commit: 4194aaf3ba562bb810a701d16dbbbb7c7ff9eddb
Vcs-Git-Ref: refs/heads/update-to-9.0.3-lp2142590-resolute