-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 12 Jun 2025 14:42:42 -0300 Source: valkey Architecture: source Version: 8.1.1+dfsg1-2 Distribution: unstable Urgency: medium Maintainer: Lucas Kanashiro <kanashiro@debian.org> Changed-By: Lucas Kanashiro <kanashiro@debian.org> Closes: 1107210 Changes: valkey (8.1.1+dfsg1-2) unstable; urgency=medium . * Fix CVE-2025-49112 (Closes: #1107210) setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size - prev->used. - d/p/CVE-2025-49112.patch Checksums-Sha1: 17b581a5cefaa6cb6d91de7365bfb5561654a801 2243 valkey_8.1.1+dfsg1-2.dsc 40f52feab50d74dc579abf6702429bbd080dce39 2726128 valkey_8.1.1+dfsg1.orig.tar.xz 0768a006b271938a99a075f026e56a8bb5d74729 18028 valkey_8.1.1+dfsg1-2.debian.tar.xz Checksums-Sha256: 2b20fcb6204e4401034efa8db5614687f3726c2f3dd0941acf437be4a40f6e90 2243 valkey_8.1.1+dfsg1-2.dsc d9bbd82eecb82f359e649a0007ad3dc1b47cc15afa626348ca86b73c4ae2c7ee 2726128 valkey_8.1.1+dfsg1.orig.tar.xz 4119f4cc7c2f13c32c1528f712097d8b3cae987ee9afda2194b7a98f8b6df986 18028 valkey_8.1.1+dfsg1-2.debian.tar.xz Files: d6882829456bece7dd9dcc80bd220516 2243 database optional valkey_8.1.1+dfsg1-2.dsc 3ec2c18e27d75a0736caa812c2718c41 2726128 database optional valkey_8.1.1+dfsg1.orig.tar.xz ab43ad0171a64b47f9d8d05c8fd1d452 18028 database optional valkey_8.1.1+dfsg1-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQJJBAEBCgAzFiEEjtbD+LrJ23/BMKhw+COicpiDyXwFAmhLFUkVHGthbmFzaGly b0BkZWJpYW4ub3JnAAoJEPgjonKYg8l8OTAP/Ah0V5t3TxskrvcA5tKMagacsBtL y3dvmrzrScYJBW3h7ovlVoq6FIDBaDZ9IMC5wxuqJy649UQ1P+DQdjXiRfgHujzg dP2bxcoH3njF/o/ZnETygodpKNIBLaYXPrzgKRoB6pU1VEv/kcpnMbv/wZ4s2le5 303RDJtkPo05hju95LFkKt52tXVLIwWTg1SlOacZ+KwUCZ8yrI/78vMds0K21hyN MI4Fr2f+Jteg/70ohRSOf5SnND4eDjhRE3bnuHAraE0yV/z7skQYFKOdeSTKF1Dd 05lvP+RpZwtYmzXk8OMm7WEudFvJm6ZVNBtLDMHU2vvXBH7EvLg4ecgiamAqvwCz 2fAJITu5jS7kM6DJmNUFpCMz6UuubHK83ZAfoc/KwWwurz+4wJvPXyP84OZ91CxI xy8zEke8IZroQqPNR8HSmh8Ba3g27VUDc1x8NS1obo/eYviLGOeJzPfw1cqW+4Eq BgXHbgZr86U+VP+NOc21iFNNzUGNSiKpZPW+MjXpbrKbKg7Tet2oSjKo55rBxZFp ef5zy3YXGA1sepsKgh4kt+N6IEwTS5pteQlseNFUSs4QtpJgI1LhBrQoagqSVBBB bQW7lHLdsosngcbJAlgTpqCbZHdOwYxY+D4rW/kMVuh2F3DjPxG6ZFFpDpHyrkRP 0YCQ0Q84JFXr8zr7 =go8N -----END PGP SIGNATURE-----