CVE-2025-29923 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-29923 Interim 1 14 2026-03-05T01:10:24Z current 2025-03-30T00:11:55Z 2026-03-05T01:10:24Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-29923 go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when `CLIENT SETINFO` times out during connection establishment. This can happen when the client is configured to transmit its identity, there are network connectivity issues, or the client was configured with aggressive timeouts. The problem occurs for multiple use cases. For sticky connections, you receive persistent out-of-order responses for the lifetime of the connection. All commands in the pipeline receive incorrect responses. When used with the default ConnPool once a connection is returned after use with ConnPool#Put the read buffer will be checked and the connection will be marked as bad due to the unread data. This means that at most one out-of-order response before the connection is discarded. This issue is fixed in 9.5.5, 9.6.3, and 9.7.3. You can prevent the vulnerability by setting the flag DisableIndentity to true when constructing the client instance. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2025-June/040351.html E-Mail link for SUSE-SU-2025:01987-1 https://lists.suse.com/pipermail/sle-updates/2025-June/040349.html E-Mail link for SUSE-SU-2025:01989-1 https://lists.suse.com/pipermail/sle-updates/2025-June/040347.html E-Mail link for SUSE-SU-2025:01991-1 https://lists.suse.com/pipermail/sle-security-updates/2026-February/024058.html E-Mail link for SUSE-SU-2026:0383-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NEVFAGUWHTVZSJTUAIU6C4S26DP2KIGB/ E-Mail link for openSUSE-SU-2025:14937-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2PKSIUOW7HIED3L6UVUD2KMZSPDHNUTO/ E-Mail link for openSUSE-SU-2025:15052-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-EC2 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 SUSE Manager Client Tools 12 SUSE Manager Client Tools 15 SUSE Manager Client Tools for SLE 12 SUSE Manager Client Tools for SLE 15 SUSE Manager Client Tools for SLE Micro 5 SUSE Manager Proxy 4.3 SUSE Manager Proxy LTS 4.3 SUSE Manager Proxy Module 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server 4.3 SUSE Manager Server LTS 4.3 SUSE Multi-Linux Manager Client Tools for SLE 12 SUSE Multi-Linux Manager Client Tools for SLE 15 openSUSE Leap 15.6 openSUSE Tumbleweed cloud-init-25.1.3-slfo.1.1_1.1 cloud-init-config-suse-25.1.3-slfo.1.1_1.1 firewalld-prometheus-config-0.1-150000.3.62.2 golang-github-prometheus-alertmanager-0.26.0-1.31.2 golang-github-prometheus-node_exporter-1.9.1-1.36.2 golang-github-prometheus-prometheus-2.53.4-1.60.2 golang-github-prometheus-prometheus-2.53.4-150000.3.62.2 govulncheck-vulndb-0.0.20250327T184518-1.1 govulncheck-vulndb-0.0.20250814T182633-160000.1.2 grafana grafana-11.5.4-1.1 grafana-11.5.5-1.79.2 grafana-11.5.5-150000.1.79.1 grafana-11.5.5-150200.3.72.2 prometheus-blackbox_exporter-0.26.0-1.27.1 prometheus-blackbox_exporter-0.26.0-150000.1.27.1 rekor rekor-1.4.1-1.1 rekor-1.4.3-150400.4.28.1 cloud-init-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro cloud-init-config-suse-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro cloud-init-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro-Azure cloud-init-config-suse-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro-Azure cloud-init-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS cloud-init-config-suse-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS cloud-init-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS-Azure cloud-init-config-suse-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS-Azure cloud-init-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS-EC2 cloud-init-config-suse-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro-BYOS-EC2 cloud-init-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro-EC2 cloud-init-config-suse-25.1.3-slfo.1.1_1.1 as a component of Image SLE-Micro-EC2 rekor-1.4.3-150400.4.28.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 grafana-11.5.5-150200.3.72.2 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 grafana-11.5.5-150200.3.72.2 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 golang-github-prometheus-node_exporter-1.9.1-1.36.2 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA golang-github-prometheus-node_exporter-1.9.1-1.36.2 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS rekor-1.4.3-150400.4.28.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA govulncheck-vulndb-0.0.20250814T182633-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 golang-github-prometheus-node_exporter-1.9.1-1.36.2 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 golang-github-prometheus-alertmanager-0.26.0-1.31.2 as a component of SUSE Manager Client Tools 12 golang-github-prometheus-node_exporter-1.9.1-1.36.2 as a component of SUSE Manager Client Tools 12 golang-github-prometheus-prometheus-2.53.4-1.60.2 as a component of SUSE Manager Client Tools 12 grafana-11.5.5-1.79.2 as a component of SUSE Manager Client Tools 12 prometheus-blackbox_exporter-0.26.0-1.27.1 as a component of SUSE Manager Client Tools 12 firewalld-prometheus-config-0.1-150000.3.62.2 as a component of SUSE Manager Client Tools 15 golang-github-prometheus-prometheus-2.53.4-150000.3.62.2 as a component of SUSE Manager Client Tools 15 grafana-11.5.5-150000.1.79.1 as a component of SUSE Manager Client Tools 15 prometheus-blackbox_exporter-0.26.0-150000.1.27.1 as a component of SUSE Manager Client Tools 15 prometheus-blackbox_exporter-0.26.0-150000.1.27.1 as a component of SUSE Manager Client Tools for SLE Micro 5 prometheus-blackbox_exporter-0.26.0-150000.1.27.1 as a component of SUSE Manager Proxy Module 4.3 grafana-11.5.5-150200.3.72.2 as a component of openSUSE Leap 15.6 prometheus-blackbox_exporter-0.26.0-150000.1.27.1 as a component of openSUSE Leap 15.6 rekor-1.4.3-150400.4.28.1 as a component of openSUSE Leap 15.6 govulncheck-vulndb-0.0.20250327T184518-1.1 as a component of openSUSE Tumbleweed grafana-11.5.4-1.1 as a component of openSUSE Tumbleweed rekor-1.4.1-1.1 as a component of openSUSE Tumbleweed rekor as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS rekor as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS rekor as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS rekor as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 rekor as a component of SUSE Linux Enterprise Server 15 SP4-LTSS rekor as a component of SUSE Linux Enterprise Server 15 SP5-LTSS rekor as a component of SUSE Linux Enterprise Server 15 SP6-LTSS rekor as a component of SUSE Linux Enterprise Server 16.0 rekor as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 rekor as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 rekor as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 rekor as a component of SUSE Linux Enterprise Server for SAP applications 16.0 grafana as a component of SUSE Manager Client Tools for SLE 12 grafana as a component of SUSE Manager Client Tools for SLE 15 rekor as a component of SUSE Manager Proxy 4.3 rekor as a component of SUSE Manager Proxy LTS 4.3 rekor as a component of SUSE Manager Retail Branch Server 4.3 rekor as a component of SUSE Manager Retail Branch Server LTS 4.3 rekor as a component of SUSE Manager Server 4.3 rekor as a component of SUSE Manager Server LTS 4.3 grafana as a component of SUSE Multi-Linux Manager Client Tools for SLE 12 grafana as a component of SUSE Multi-Linux Manager Client Tools for SLE 15 go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when `CLIENT SETINFO` times out during connection establishment. This can happen when the client is configured to transmit its identity, there are network connectivity issues, or the client was configured with aggressive timeouts. The problem occurs for multiple use cases. For sticky connections, you receive persistent out-of-order responses for the lifetime of the connection. All commands in the pipeline receive incorrect responses. When used with the default ConnPool once a connection is returned after use with ConnPool#Put the read buffer will be checked and the connection will be marked as bad due to the unread data. This means that at most one out-of-order response before the connection is discarded. This issue is fixed in 9.5.5, 9.6.3, and 9.7.3. You can prevent the vulnerability by setting the flag DisableIndentity to true when constructing the client instance. CVE-2025-29923 Image SLE-Micro:cloud-init-25.1.3-slfo.1.1_1.1 Image SLE-Micro:cloud-init-config-suse-25.1.3-slfo.1.1_1.1 Image SLE-Micro-Azure:cloud-init-25.1.3-slfo.1.1_1.1 Image SLE-Micro-Azure:cloud-init-config-suse-25.1.3-slfo.1.1_1.1 Image SLE-Micro-BYOS:cloud-init-25.1.3-slfo.1.1_1.1 Image SLE-Micro-BYOS:cloud-init-config-suse-25.1.3-slfo.1.1_1.1 Image SLE-Micro-BYOS-Azure:cloud-init-25.1.3-slfo.1.1_1.1 Image SLE-Micro-BYOS-Azure:cloud-init-config-suse-25.1.3-slfo.1.1_1.1 Image SLE-Micro-BYOS-EC2:cloud-init-25.1.3-slfo.1.1_1.1 Image SLE-Micro-BYOS-EC2:cloud-init-config-suse-25.1.3-slfo.1.1_1.1 Image SLE-Micro-EC2:cloud-init-25.1.3-slfo.1.1_1.1 Image SLE-Micro-EC2:cloud-init-config-suse-25.1.3-slfo.1.1_1.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:rekor-1.4.3-150400.4.28.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:grafana-11.5.5-150200.3.72.2 SUSE Linux Enterprise Module for Package Hub 15 SP7:grafana-11.5.5-150200.3.72.2 SUSE Linux Enterprise Server 12 SP3-TERADATA:golang-github-prometheus-node_exporter-1.9.1-1.36.2 SUSE Linux Enterprise Server 12 SP5-LTSS:golang-github-prometheus-node_exporter-1.9.1-1.36.2 SUSE Linux Enterprise Server 15 SP4-TERADATA:rekor-1.4.3-150400.4.28.1 SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:golang-github-prometheus-node_exporter-1.9.1-1.36.2 SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.26.0-1.31.2 SUSE Manager Client Tools 12:golang-github-prometheus-node_exporter-1.9.1-1.36.2 SUSE Manager Client Tools 12:golang-github-prometheus-prometheus-2.53.4-1.60.2 SUSE Manager Client Tools 12:grafana-11.5.5-1.79.2 SUSE Manager Client Tools 12:prometheus-blackbox_exporter-0.26.0-1.27.1 SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.62.2 SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.53.4-150000.3.62.2 SUSE Manager Client Tools 15:grafana-11.5.5-150000.1.79.1 SUSE Manager Client Tools 15:prometheus-blackbox_exporter-0.26.0-150000.1.27.1 SUSE Manager Client Tools for SLE Micro 5:prometheus-blackbox_exporter-0.26.0-150000.1.27.1 SUSE Manager Proxy Module 4.3:prometheus-blackbox_exporter-0.26.0-150000.1.27.1 openSUSE Leap 15.6:grafana-11.5.5-150200.3.72.2 openSUSE Leap 15.6:prometheus-blackbox_exporter-0.26.0-150000.1.27.1 openSUSE Leap 15.6:rekor-1.4.3-150400.4.28.1 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250327T184518-1.1 openSUSE Tumbleweed:grafana-11.5.4-1.1 openSUSE Tumbleweed:rekor-1.4.1-1.1 SUSE Manager Client Tools for SLE 12:grafana SUSE Manager Client Tools for SLE 15:grafana SUSE Multi-Linux Manager Client Tools for SLE 12:grafana SUSE Multi-Linux Manager Client Tools for SLE 15:grafana low 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N