python313-redis-7.0.1-2.5 on GA media (moderate)

python313-redis-7.0.1-2.5 on GA media Announcement ID: openSUSE-SU-2026:12036-1 Rating: moderate Cross-References: CVE-2023-28858 CVE-2023-28859 CVSS scores: CVE-2023-28858 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2023-28859 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A...

EUVD-2023-0222

Malicious code in bioql PyPI...

EUVD-2023-0223

Malicious code in bioql PyPI...

TencentOS Server 4: python-redis (TSSA-2024:0819)

"The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0819 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilitie...

SUSE SLED15: python-paramiko-doc / python-tqdm-bash-completion / etc (SUSE-SU-2024:1639-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1639-1 advisory. Changes in python-argcomplete - Update to 3.3.0 bsc1222880: Preserve compatibility with argparse...

FreeBSD : py39-redis -- can send response data to the client of an unrelated request (8aa6340d-e7c6-41e0-b2a3-3c9e9930312a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8aa6340d-e7c6-41e0-b2a3-3c9e9930312a advisory. - redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis...

ad-sdl-wei (>=0.5.1.dev0, <=0.5.4), addok (>=1.1.0rc2, <=1.1.0) +144 more potentially affected by CVE-2023-28859 via redis (>=4.2.0, <=4.4.3)

redis PYPI version =4.2.0, =0.5.1.dev0, =1.1.0rc2, =2.2.1, =22.5.13, =0.1.1, =0.10.0, =0.2.0, =0.5.0, =22.9.0, =22.9.0, =22.9.0, =23.3.2 and more Source cves: CVE-2023-28859 Source advisory: OSV:GHSA-8FWW-64CX-X8P5...

ad-sdl-wei (>=0.5.1.dev0, <=0.5.4), addok (>=1.1.0rc2, <=1.1.0) +144 more potentially affected by CVE-2023-28859 via redis (>=4.2.0, <=4.4.3)

redis PYPI version =4.2.0, =0.5.1.dev0, =1.1.0rc2, =2.2.1, =22.5.13, =0.1.1, =0.10.0, =0.2.0, =0.5.0, =22.9.0, =22.9.0, =22.9.0, =23.3.2 and more Source cves: CVE-2023-28859 Source advisory: GHSA-8FWW-64CX-X8P5...

abs-auth-rbac-core (>=0.1.15, <=0.5.4), airdot (>=0.3.0b0, <=0.6.0b0) +40 more potentially affected by CVE-2023-28859 via redis (>=4.5.0, <=4.5.3)

redis PYPI version =4.5.0, =0.1.15, =0.3.0b0, =23.2.9, =1.1.87, =0.0.25, =1.1.0, =1.0.0, =0.13.0, =1.0.0, =0.3.0, =1.1.38, =1.1.50, =1.1.74 and more Source cves: CVE-2023-28859 Source advisory: OSV:GHSA-8FWW-64CX-X8P5...

abs-auth-rbac-core (>=0.1.15, <=0.5.4), airdot (>=0.3.0b0, <=0.6.0b0) +40 more potentially affected by CVE-2023-28859 via redis (>=4.5.0, <=4.5.3)

redis PYPI version =4.5.0, =0.1.15, =0.3.0b0, =23.2.9, =1.1.87, =0.0.25, =1.1.0, =1.0.0, =0.13.0, =1.0.0, =0.3.0, =1.1.38, =1.1.50, =1.1.74 and more Source cves: CVE-2023-28859 Source advisory: GHSA-8FWW-64CX-X8P5...

redis-py Race Condition vulnerability

redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open after canceling an async Redis command at an inopportune time in the case of a pipeline operation, and can send response data to the client of an unrelated request in an off-by-one manner. The fixed versions fo...

GHSA-24WV-MV5M-XV4H redis-py Race Condition vulnerability

redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open after canceling an async Redis command at an inopportune time in the case of a pipeline operation, and can send response data to the client of an unrelated request in an off-by-one manner. The fixed versions fo...

ad-sdl-wei (>=0.5.1.dev0, <=0.5.4), addok (>=1.1.0rc2, <=1.1.0) +144 more potentially affected by CVE-2023-28859 via redis (>=4.2.0, <=4.4.3)

redis PYPI version =4.2.0, =0.5.1.dev0, =1.1.0rc2, =2.2.1, =22.5.13, =0.1.1, =0.10.0, =0.2.0, =0.5.0, =22.9.0, =22.9.0, =22.9.0, =23.3.2 and more Source cves: CVE-2023-28859 Source advisory: OSV:PYSEC-2023-46...

abs-auth-rbac-core (>=0.1.15, <=0.5.4), airdot (>=0.3.0b0, <=0.6.0b0) +40 more potentially affected by CVE-2023-28859 via redis (>=4.5.0, <=4.5.3)

redis PYPI version =4.5.0, =0.1.15, =0.3.0b0, =23.2.9, =1.1.87, =0.0.25, =1.1.0, =1.0.0, =0.13.0, =1.0.0, =0.3.0, =1.1.38, =1.1.50, =1.1.74 and more Source cves: CVE-2023-28859 Source advisory: OSV:PYSEC-2023-46...

CVE-2023-28859

CVE-2023-28859 affects redis-py: vulnerable in versions before 4.4.4 and 4.5.x before 4.5.4. The issue leaves a connection open after canceling an async Redis command at an inopportune time, potentially sending response data to the client of an unrelated request (e.g., non-pipeline operations). T...

CVE-2023-28859

redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. This could, for example, happen for a non-pipeline operation. NOTE: the solutions for CVE-2023-288...

ad-sdl-wei (>=0.5.1.dev0, <=0.5.4), addok (>=1.1.0rc2, <=1.1.0) +93 more potentially affected by CVE-2023-28858 +1 more via redis (>=4.2.0, <=4.3.5)

redis PYPI version =4.2.0, =0.5.1.dev0, =1.1.0rc2, =22.5.13, =0.1.1, =0.5.0, =3.2.0, =1.0.0, =0.5.0, =0.1.0, =2.0.3, =0.1.2, =0.1.15 and more Source cves: CVE-2023-28858, CVE-2023-28859 Source advisory: MEND:CVE-2023-28858...

an-website (>=22.12.28, <=23.2.6), anoteai (>=0.10.0, <=0.20.0) +24 more potentially affected by CVE-2023-28858 +1 more via redis (>=4.4.0, <=4.4.2)

redis PYPI version =4.4.0, =22.12.28, =0.10.0, =0.8.2, =0.1.17, =0.0.10, =0.5.0rc1, =0.0.122, =0.104.0rc1, =0.7.2rc1, =0.31.0, =1.0.2, =0.4.8, =0.4.9 and more Source cves: CVE-2023-28858, CVE-2023-28859 Source advisory: MEND:CVE-2023-28858...

ad-sdl-wei (>=0.5.1.dev0, <=0.5.4), addok (>=1.1.0rc2, <=1.1.0) +144 more potentially affected by CVE-2023-28859 via redis (>=4.2.0, <=4.4.3)

redis PYPI version =4.2.0, =0.5.1.dev0, =1.1.0rc2, =2.2.1, =22.5.13, =0.1.1, =0.10.0, =0.2.0, =0.5.0, =22.9.0, =22.9.0, =22.9.0, =23.3.2 and more Source cves: CVE-2023-28859 Source advisory: MEND:CVE-2023-28859...

abs-auth-rbac-core (>=0.1.15, <=0.5.4), airdot (>=0.3.0b0, <=0.6.0b0) +37 more potentially affected by CVE-2023-28858 +1 more via redis (>=4.5.0, <=4.5.2)

redis PYPI version =4.5.0, =0.1.15, =0.3.0b0, =23.2.9, =1.1.87, =0.0.25, =1.1.0, =1.0.0, =0.13.0, =1.0.0, =0.3.0, =4.7.0, =4.7.3 and more Source cves: CVE-2023-28858, CVE-2023-28859 Source advisory: MEND:CVE-2023-28858...