File _patchinfo of Package patchinfo.42433
<patchinfo incident="42433"> <issue tracker="jsc" id="SLE-23476"/> <issue tracker="cve" id="2025-29923"/> <issue tracker="cve" id="2025-58058"/> <issue tracker="bnc" id="1248910">VUL-0: CVE-2025-58058: rekor: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory</issue> <issue tracker="bnc" id="1241153">VUL-0: CVE-2025-29923: rekor: github.com/redis/go-redis: potential out of order responses when `CLIENT SETINFO` times out during connection establishment</issue> <packager>msmeissn</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for rekor</summary> <description>This update for rekor fixes the following issues: Security fixes: - CVE-2025-58058: Fixed github.com/ulikunitz/xz leaks memory (bsc#1248910) - CVE-2025-29923: Fixed potential out of order responses when `CLIENT SETINFO` times out during connection establishment (bsc#1241153) Other fixes: - Update to version 1.4.3 - Update to version 1.4.2 - Update to version 1.4.1 (jsc#SLE-23476) </description> </patchinfo>