valkey (7.2.12+dfsg1-0ubuntu0.1) noble; urgency=medium

  * New upstream version 7.2.12 (LP: #2142590)
    - Security fixes:
        + CVE-2025-67733: RESP Protocol Injection via Lua error_reply.
        + CVE-2026-21863: Remote DoS with malformed Valkey Cluster bus message.
    - Bug fixes:
        + Fix ltrim should not call signalModifiedKey when no elements are
          removed.
        + Fix potential infinite loop in clusterNodeGetMaster.
        + Avoids crash during MODULE UNLOAD when ACL rules reference a module
          command and subcommand.

 -- Lena Voytek <lena.voytek@canonical.com>  Tue, 24 Feb 2026 09:01:01 -0500

valkey (7.2.11+dfsg1-0ubuntu0.2) noble-security; urgency=medium

  * No change rebuild to copy previous update to the security pocket.

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Wed, 19 Nov 2025 13:39:49 -0330

valkey (7.2.11+dfsg1-0ubuntu0.1) noble; urgency=medium

  * New upstream version 7.2.11 (LP: #2127122)
    - Security fixes:
      + CVE-2025-49844: Lua script may lead to remote code execution.
      + CVE-2025-46817: Lua script may lead to int overflow and potential RCE.
      + CVE-2025-46818: Lua script can be executed in context of another user.
      + CVE-2025-46819: LUA out-of-bound read.
      + CVE-2025-49112: Integer underflow in setDeferredReply networking.c.
    - Bug fixes:
      + Ensure empty error tables in scripts don't crash Valkey.
      + Fix client tracking memory overhead calculation.
      + Fix assumptions that pthread functions set errno.
  * d/rules: Increase test timeout during build.

 -- Lena Voytek <lena.voytek@canonical.com>  Sat, 11 Oct 2025 23:49:31 -0400

valkey (7.2.10+dfsg1-0ubuntu0.1) noble; urgency=medium

  * New upstream version 7.2.10 (LP: #2115258)
    - Security fixes:
      + CVE-2025-21605: Allocation of Resources Without Limits or Throttling.
      + CVE-2025-32023: Out-of-bounds write during hyperloglog operations.
      + CVE-2025-48367: IP Protocol errors resulting in DoS.
      + CVE-2025-27151: AOF file name length not checked.
    - Bug fixes:
      + Only mark the client reprocessing flag when unblocked on keys.
      + Free module context even if there was no content written in auxsave2.
      + Fix Detect SSL_new() returning NULL in outgoing connections.
      + Correctly cast the extension lengths.
      + Fix cluster myself CLUSTER SLOTS/NODES wrong port after updating
        port/tls-port.
      + Fix replica can't finish failover when config epoch is outdated.
      + Fix CLIENT UNBLOCK ability to unpause paused clients.
      + Fix defrag crash when using FLUSHDB ASYNC in cluster mode.
      + Fix memory leak in forgotten node ping ext code path.
      + Fix module LatencyAddSample still work when latency-monitor-threshold
        is 0.
      + Fix raxRemove crash at memcpy() due to key size exceeds max Rax size.
      + Fix error "SSL routines::bad length" when connTLSWrite is called second
        time with smaller buffer.
      + Fix RANDOMKEY infinite loop during CLIENT PAUSE.
      + Fix adding samples to stream object consumer trees.
      + Fix panic in primary when blocking shutdown after previous block with
        timeout.
      + Fix incorrect lag reported in XINFO GROUPS.

 -- Lena Voytek <lena.voytek@canonical.com>  Tue, 24 Jun 2025 15:08:25 -0400

valkey (7.2.8+dfsg1-0ubuntu0.24.04.3) noble; urgency=medium

  * d/valkey-redis-compat.postinst: Do not migrate on upgrade if redis files
    have already been migrated (LP: #2104217).

 -- Lena Voytek <lena.voytek@canonical.com>  Wed, 18 Jun 2025 16:58:33 -0400

valkey (7.2.8+dfsg1-0ubuntu0.24.04.2) noble-security; urgency=medium

  * No-change rebuild in the ~security pocket 

 -- Julia Sarris <julia.sarris@canonical.com>  Mon, 03 Mar 2025 10:25:22 -0500

valkey (7.2.8+dfsg1-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream version 7.2.8 (LP: #2097546)
    - Security fixes:
      + CVE-2024-46981: Lua script commands may lead to remote code
        execution.
      + CVE-2024-51741: Denial-of-service due to malformed ACL
        selectors.
    - Bug fixes:
      + Fix extra memory use when storing strings in inline protocol.
      + Fix error message when FUNCTION KILL is used on a script.
      + Fix last accessed time update using TOUCH with CLIENT NO-TOUCH
        option.

 -- Lena Voytek <lena.voytek@canonical.com>  Thu, 06 Feb 2025 08:58:24 -0500

valkey (7.2.7+dfsg1-0ubuntu0.24.04.1) noble; urgency=medium

  * New upstream version 7.2.7 (LP: #2091129)
    - Security fixes:
      + CVE-2024-31449: Lua library commands may lead to stack overflow and
        potential RCE.
      + CVE-2024-31227: Potential Denial-of-service due to malformed ACL
        selectors.
      + CVE-2024-31228: Potential Denial-of-service due to unbounded pattern
        matching.
    - Bug fixes:
      + Fix re-enable of Append-Only File flag in RdbLoad module.
      + Fix cluster replica failure to establish replication link in race
        condition.
      + Fix valkeymodule-rs build issues due to typo in REGISTER_API.
      + Fix crash where command duration is not reset when client is blocked.
      + Fix CLUSTER SHARDS empty array return.
      + Fix client auth block when a cluster is down.
      + Fix MEET request reliability during link failure.
      + Ensure the --count option in redis-cli works correctly even without
        --pattern.
      + Fix redis-check-aof misidentifying data in manifest format as MP-AOF.
    - Updates:
      + Add clusterNodeIsVotingPrimary concept to fix issue where nodes outside
        the quorum group could mark nodes as failed.
      + Add compatibility with redis-sentinel for starting sentinel.
      + Update redis-check-rdb types to replace stream-v2 with stream-v3
  * d/watch: Fix repack suffix

 -- Lena Voytek <lena.voytek@canonical.com>  Thu, 05 Dec 2024 14:44:44 -0700

valkey (7.2.5+dfsg1-2ubuntu4~24.04.1) noble; urgency=medium

  * Backport from Oracular to Noble (LP: #2081000).

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Fri, 20 Sep 2024 20:19:57 -0300

valkey (7.2.5+dfsg1-2ubuntu4) oracular; urgency=medium

  * d/watch: Fix dversionmangle.
  * d/rules: remove "|| true" from testing calls.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Fri, 20 Sep 2024 17:10:49 -0300

valkey (7.2.5+dfsg1-2ubuntu3) oracular; urgency=medium

  * d/t/0006-migrate-from-redis: fix the way the compat package is installed
    during the test.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Wed, 18 Sep 2024 12:25:38 -0300

valkey (7.2.5+dfsg1-2ubuntu2) oracular; urgency=medium

  * d/valkey-redis-compat.postinst:
    - Use "cp -a" to preserve permissions and keep old data around.
    - Stop daemons before perfoming migration.
  * d/tests: use systemctl instead of service to restart valkey.
  * d/t/control: explicitly add Depends for each test.
  * d/t/0006-migrate-from-redis:
    - Print the checksum of the RDB file.
    - Make sure data in-memory is on-disk when migrating data.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Tue, 17 Sep 2024 19:17:44 -0300

valkey (7.2.5+dfsg1-2ubuntu1) oracular; urgency=medium

  * d/control: add valkey-redis-compat binary package paragraph
  * d/valkey-redis-compat.postinst: migrate data and config from Redis
  * d/bin/generate-systemd-service-files: do not start the services if Redis
    migration happened.
  * d/{README.Debian,valkey-redis-compat.NEWS}: document how the Redis
    migration works.
  * d/valkey-redis-compat.links: create compatibility symlinks for Redis
  * d/tests: test Redis migration via DEP-8 test

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Mon, 12 Aug 2024 19:30:23 -0300

valkey (7.2.5+dfsg1-2) unstable; urgency=medium

  * d/copyright: remove the excluded files paragraph.
  * d/copyright: add missing License field.
  * d/watch: add version mangle and repack suffix because of dfsg.

 -- Lucas Kanashiro <kanashiro@debian.org>  Fri, 09 Aug 2024 19:01:26 -0300

valkey (7.2.5+dfsg1-1) unstable; urgency=medium

  * Initial packaging (Closes: #1068342).

 -- Lucas Kanashiro <kanashiro@debian.org>  Wed, 26 Jun 2024 18:35:47 -0300
