valkey (8.0.6+dfsg1-0ubuntu0.2) plucky-security; urgency=medium

  * No change rebuild to copy previous update to the security pocket.

 -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Wed, 19 Nov 2025 12:20:00 -0330

valkey (8.0.6+dfsg1-0ubuntu0.1) plucky; urgency=medium

  * New upstream version 8.0.6 (LP: #2127122)
    - Security fixes:
      + CVE-2025-49844: Lua script may lead to remote code execution.
      + CVE-2025-46817: Lua script may lead to int overflow and potential RCE.
      + CVE-2025-46818: Lua script can be executed in context of another user.
      + CVE-2025-46819: LUA out-of-bound read.
      + CVE-2025-49112: Integer underflow in setDeferredReply networking.c.
      + CVE-2025-27151: Check length of AOF file name in valkey-check-aof and
        reject paths longer than PATH_MAX.
    - Bug fixes:
      + Fix accounting for dual channel RDB bytes in replication stats.
      + Fix dual rdb channel connection conn error log.
      + Only mark the client reprocessing flag when unblocked on keys.
      + Fix memory corruption in sharded pubsub unsubscribe.
      + Free module context even if there was no content written in auxsave2.
      + Do not unpause paused clients with client unblock.
      + Fix Detect SSL_new() returning NULL in outgoing connections.
      + Correctly cast the extension lengths.
      + Fix replica can't finish failover when config epoch is outdated.
      + Fix cluster wrong myself port after updating port/tls-port.
      + Ensure empty error tables in scripts don't crash Valkey.
      + Fix client tracking memory overhead calculation.
      + Converge shard-id persisted in nodes.conf to primary's shard id.
      + Fix pre-size hashtables per slot when reading RDB files.
    - Updates:
      + Trigger the election as soon as possible when doing a forced manual
        failover.
      + Make manual failover reset the on-going election to promote failover.
      + Fix logs when failover auth denied due to slot epoch.
    - Features:
      + Add a filter option to drop all cluster packets.

 -- Lena Voytek <lena.voytek@canonical.com>  Sat, 11 Oct 2025 23:25:21 -0400

valkey (8.0.4+dfsg1-0ubuntu0.1) plucky; urgency=medium

  * New upstream version 8.0.4 (LP: #2115258)
    - Security fixes:
      + CVE-2025-21605: Allocation of Resources Without Limits or Throttling.
      + CVE-2025-32023: Out-of-bounds write during hyperloglog operations
      + CVE-2025-48367: IP Protocol errors resulting in DoS
    - Bug fixes:
      + Optimize RDB Load Performance and Fix Cluster Mode Resizing.
      + Fix memory leak in forgotten node ping ext code path.
      + Fix cluster info sent stats for message with light header.
      + Fix module LatencyAddSample still work when latency-monitor-threshold
        is 0.
      + Fix raxRemove crash at memcpy() due to key size exceeds max Rax size.
      + Fix error "SSL routines::bad length" when connTLSWrite is called
        second time with smaller buffer.
      + Fix temp file leak druing replication error handling.
      + Fix ACL LOAD crash on replica since the primary client don't has a
        user.
      + Fix RANDOMKEY infinite loop during CLIENT PAUSE.
      + Fix adding samples to stream object consumer trees.
      + Fix cluster slot stats assertion during promotion of replica.
      + Fix panic in primary when blocking shutdown after previous block with
        timeout.
      + Ignore stale gossip packets that arrive out of order.
      + Fix incorrect lag reported in XINFO GROUPS.
      + Avoid shard id update of replica if not matching with primary shard id.

 -- Lena Voytek <lena.voytek@canonical.com>  Tue, 24 Jun 2025 14:45:07 -0400

valkey (8.0.2+dfsg1-1ubuntu2) plucky; urgency=medium

  * d/valkey-redis-compat.postinst: Do not migrate on upgrade if redis files
    have already been migrated (LP: #2104217).

 -- Lena Voytek <lena.voytek@canonical.com>  Wed, 18 Jun 2025 16:50:06 -0400

valkey (8.0.2+dfsg1-1ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - Redis compatibility and migration:
      + d/bin/generate-systemd-service-files: do not start the services if
        Redis migration happened.
      + d/control: add valkey-redis-compat binary package paragraph
      + d/{README.Debian,valkey-redis-compat.NEWS}: document how the Redis
        migration works.
      + d/valkey-redis-compat.links: create compatibility symlinks for Redis
      + d/valkey-redis-compat.postinst: migrate data and config from Redis
      + d/tests: test Redis migration via DEP-8 test
    - d/tests: use systemctl instead of service to restart valkey.
    - d/t/control: explicitly add Depends for each test.
    - d/rules: remove "|| true" from testing calls.

 -- Lena Voytek <lena.voytek@canonical.com>  Thu, 06 Feb 2025 14:25:07 -0500

valkey (8.0.2+dfsg1-1) unstable; urgency=medium

  [ Christian Göttsche ]
  * 0003-Use-get_current_dir_name-over-PATHMAX.patch: free allocated memory
  * d/rules: enable LTO
  * valkey-tools.postinst: create directories with default SELinux context

  [ Lucas Kanashiro ]
  * New upstream version 8.0.2+dfsg1
    - Fixes CVE-2024-46981 and CVE-2024-51741 (Closes: #1092371)

 -- Lucas Kanashiro <kanashiro@debian.org>  Mon, 13 Jan 2025 23:55:00 -0300

valkey (8.0.1+dfsg1-1ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable (LP: #2085304). Remaining changes:
    - Redis compatibility and migration:
      + d/bin/generate-systemd-service-files: do not start the services if
        Redis migration happened.
      + d/control: add valkey-redis-compat binary package paragraph
      + d/{README.Debian,valkey-redis-compat.NEWS}: document how the Redis
        migration works.
      + d/valkey-redis-compat.links: create compatibility symlinks for Redis
      + d/valkey-redis-compat.postinst: migrate data and config from Redis
      + d/tests: test Redis migration via DEP-8 test
    - d/tests: use systemctl instead of service to restart valkey.
    - d/t/control: explicitly add Depends for each test.
    - d/rules: remove "|| true" from testing calls.

 -- Lena Voytek <lena.voytek@canonical.com>  Tue, 22 Oct 2024 11:02:02 -0700

valkey (8.0.1+dfsg1-1) unstable; urgency=medium

  [ Lena Voytek ]
  * New upstream release 8.0.1
  * Refresh patches against new version:
    - d/p/debian-packaging/0001-Set-Debian-configuration-defaults.patch
    - d/p/0002-Add-CPPFLAGS-to-upstream-makefiles.patch
    - d/p/0003-Use-get_current_dir_name-over-PATHMAX.patch
    - d/p/0004-Add-support-for-USE_SYSTEM_JEMALLOC-flag.patch
  * d/valkey-server.docs: Remove MANIFESTO
  * d/valkey-tools.examples: Remove redis-trib.rb

  [ Lucas Kanashiro ]
  * d/copyright: remove superfluous file pattern

 -- Lucas Kanashiro <kanashiro@debian.org>  Fri, 18 Oct 2024 19:23:21 -0300

valkey (7.2.5+dfsg1-2ubuntu4) oracular; urgency=medium

  * d/watch: Fix dversionmangle.
  * d/rules: remove "|| true" from testing calls.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Fri, 20 Sep 2024 17:10:49 -0300

valkey (7.2.5+dfsg1-2ubuntu3) oracular; urgency=medium

  * d/t/0006-migrate-from-redis: fix the way the compat package is installed
    during the test.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Wed, 18 Sep 2024 12:25:38 -0300

valkey (7.2.5+dfsg1-2ubuntu2) oracular; urgency=medium

  * d/valkey-redis-compat.postinst:
    - Use "cp -a" to preserve permissions and keep old data around.
    - Stop daemons before perfoming migration.
  * d/tests: use systemctl instead of service to restart valkey.
  * d/t/control: explicitly add Depends for each test.
  * d/t/0006-migrate-from-redis:
    - Print the checksum of the RDB file.
    - Make sure data in-memory is on-disk when migrating data.

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Tue, 17 Sep 2024 19:17:44 -0300

valkey (7.2.5+dfsg1-2ubuntu1) oracular; urgency=medium

  * d/control: add valkey-redis-compat binary package paragraph
  * d/valkey-redis-compat.postinst: migrate data and config from Redis
  * d/bin/generate-systemd-service-files: do not start the services if Redis
    migration happened.
  * d/{README.Debian,valkey-redis-compat.NEWS}: document how the Redis
    migration works.
  * d/valkey-redis-compat.links: create compatibility symlinks for Redis
  * d/tests: test Redis migration via DEP-8 test

 -- Lucas Kanashiro <kanashiro@ubuntu.com>  Mon, 12 Aug 2024 19:30:23 -0300

valkey (7.2.5+dfsg1-2) unstable; urgency=medium

  * d/copyright: remove the excluded files paragraph.
  * d/copyright: add missing License field.
  * d/watch: add version mangle and repack suffix because of dfsg.

 -- Lucas Kanashiro <kanashiro@debian.org>  Fri, 09 Aug 2024 19:01:26 -0300

valkey (7.2.5+dfsg1-1) unstable; urgency=medium

  * Initial packaging (Closes: #1068342).

 -- Lucas Kanashiro <kanashiro@debian.org>  Wed, 26 Jun 2024 18:35:47 -0300
