From: Wang Mingyu <[email protected]>

Security fixes
-----------------
(CVE-2025-67733) RESP Protocol Injection via Lua error_reply
(CVE-2026-21863) Remote DoS with malformed Valkey Cluster bus message
(CVE-2026-27623) Reset request type after handling empty requests

Bug fixes
------------
Avoids crash during MODULE UNLOAD when ACL rules reference a module command and 
subcommand
Fix server assert on ACL LOAD when current user loses permission to channels
Fix bug causing no response flush sometimes when IO threads are busy

Signed-off-by: Wang Mingyu <[email protected]>
---
 .../valkey/{valkey_9.0.2.bb => valkey_9.0.3.bb}                 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-oe/recipes-extended/valkey/{valkey_9.0.2.bb => valkey_9.0.3.bb} 
(98%)

diff --git a/meta-oe/recipes-extended/valkey/valkey_9.0.2.bb 
b/meta-oe/recipes-extended/valkey/valkey_9.0.3.bb
similarity index 98%
rename from meta-oe/recipes-extended/valkey/valkey_9.0.2.bb
rename to meta-oe/recipes-extended/valkey/valkey_9.0.3.bb
index 419efab17c..1842befdee 100644
--- a/meta-oe/recipes-extended/valkey/valkey_9.0.2.bb
+++ b/meta-oe/recipes-extended/valkey/valkey_9.0.3.bb
@@ -15,7 +15,7 @@ SRC_URI = 
"git://github.com/valkey-io/valkey.git;branch=9.0;protocol=https;tag=$
            file://0001-src-Do-not-reset-FINAL_LIBS.patch \
            file://GNU_SOURCE-7.patch \
            "
-SRCREV = "1ac4cfe4c877a6cb8cb2e28fa7094055ac06f64b"
+SRCREV = "6e63ad9ccdceea562a6ea9ea9df9160c0d1109d6"
 
 RPROVIDES:${PN} = "virtual-redis"
 
-- 
2.43.0

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#124748): 
https://lists.openembedded.org/g/openembedded-devel/message/124748
Mute This Topic: https://lists.openembedded.org/mt/118027943/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to