Path to this page:
Subject: CVS commit: pkgsrc/databases/py-redis
From: Adam Ciarcinski
Date: 2023-03-30 09:11:22
Message id: 20230330071122.9DBC7FA75@cvs.NetBSD.org
Log Message:
py-redis: updated to 4.5.4
4.5.4
Upgrade urgency: SECURITY, contains fixes to security issues.
(CVE-2023-28859) - Cancelling an async future does not, properly trigger, \
leading to a potential data leak in specific cases.
(CVE-2023-28858) - Cancelling an async future does not, properly trigger, \
leading to a potential data leak in specific cases.
🐛 Bug Fixes
Fixing cancelled async futures
Fix: do not use asyncio's timeout lib before 3.11.2
Fix UDS in v4.5.2: UnixDomainSocketConnection missing constructor argument
🧰 Maintenance
Minor fixes for 2666 and enhanced async test
Fix issue 2660: PytestUnraisableExceptionWarning from asycio client
Removing accidentally checked in files
Files: