Skip to content

[AUTOPATCHER-CORE] Upgrade redis to 6.2.18 for CVE-2025-21605 [HIGH] #13643

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

CBL-Mariner-Bot
Copy link
Collaborator

[AUTOPATCHER-CORE] Upgrade redis to 6.2.18 for CVE-2025-21605
Upgrade pipeline run -> https://dev.azure.com/mariner-org/mariner/_build/results?buildId=799595&view=results

@kgodara912
Copy link
Contributor

Minor version upgrade release notes: https://github.com/redis/redis/releases/tag/6.2.18
Buddy Build

@kgodara912 kgodara912 changed the title [AUTOPATCHER-CORE] Upgrade redis to 6.2.18 for CVE-2025-21605 [AUTOPATCHER-CORE] Upgrade redis to 6.2.18 for CVE-2025-21605 [HIGH] Apr 30, 2025
Copy link
Contributor

@PawelWMS PawelWMS left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good.

Issues with libuv test failures is known and will be addressed through a separate bug.

@PawelWMS PawelWMS added the CVEFixReadyForMaintainerReview When a CVE fix has been reviewed by release manager and is ready for stable maintainer review label May 1, 2025
@jslobodzian jslobodzian merged commit 3974470 into fasttrack/2.0 May 5, 2025
17 of 20 checks passed
@jslobodzian jslobodzian deleted the cblmargh/redis-upgrade-to-6.2.18-fasttrack/2.0 branch May 5, 2025 19:00
CBL-Mariner-Bot added a commit that referenced this pull request May 5, 2025
…13643)

Co-authored-by: jslobodzian <joslobo@microsoft.com>
(cherry picked from commit 3974470)
@CBL-Mariner-Bot
Copy link
Collaborator Author

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Automatic PR AutoUpgrade Core CVEFixReadyForMaintainerReview When a CVE fix has been reviewed by release manager and is ready for stable maintainer review fasttrack/2.0 PRs Destined for Azure Linux 2.0 Packaging security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants