Subject: CVS commit: pkgsrc/databases/py-redis
From: Adam Ciarcinski
Date: 2023-03-30 09:11:22
Message id: 20230330071122.9DBC7FA75@cvs.NetBSD.org

Log Message:
py-redis: updated to 4.5.4

4.5.4

Upgrade urgency: SECURITY, contains fixes to security issues.

(CVE-2023-28859) - Cancelling an async future does not, properly trigger, \ 
leading to a potential data leak in specific cases.
(CVE-2023-28858) - Cancelling an async future does not, properly trigger, \ 
leading to a potential data leak in specific cases.

🐛 Bug Fixes

Fixing cancelled async futures
Fix: do not use asyncio's timeout lib before 3.11.2
Fix UDS in v4.5.2: UnixDomainSocketConnection missing constructor argument

🧰 Maintenance

Minor fixes for 2666 and enhanced async test
Fix issue 2660: PytestUnraisableExceptionWarning from asycio client
Removing accidentally checked in files

Files:
RevisionActionfile
1.37modifypkgsrc/databases/py-redis/Makefile
1.34modifypkgsrc/databases/py-redis/distinfo