Sylvain Beucler pushed to branch master at Debian Security Tracker / security-tracker
Commits: 1dd085d6 by Sylvain Beucler at 2023-04-07T21:06:04+02:00 CVE-2023-28858/redis-py: buster not-affected - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -2043,9 +2043,11 @@ CVE-2023-28859 (redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection NOTE: https://github.com/redis/redis-py/pull/2641 CVE-2023-28858 (redis-py before 4.5.3 leaves a connection open after canceling an asyn ...) - python-redis <unfixed> (bug #1033754) + [buster] - python-redis <not-affected> (Vulnerable code introduced later) NOTE: https://github.com/redis/redis-py/issues/2624 NOTE: https://github.com/redis/redis-py/pull/2641 NOTE: https://openai.com/blog/march-20-chatgpt-outage + NOTE: Async support added in v4.2.0 NOTE: When fixing this issue make sure to apply complete fixes (cf. CVE-2023-28859 NOTE: CVE entry) to not open CVE-2023-28859. CVE-2023-1637 (A flaw that boot CPU could be vulnerable for the speculative execution ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1dd085d65533d968e9667dbd876acc6f8e9411e7 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1dd085d65533d968e9667dbd876acc6f8e9411e7 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits