Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(helm): update redis version due to critical CVE (HIGH PRIORITY) #23707

Merged
merged 3 commits into from
Apr 17, 2023

Conversation

justmike1
Copy link
Contributor

redis's container has critical vulnerability:
Note: CVE-2021-46848
Package: libtasn1-6
Package Type: OS
Affected Version: 4.16.0 2
Fixed Version: 4.16.0 2+deb11u1

SUMMARY

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

TESTING INSTRUCTIONS

ADDITIONAL INFORMATION

  • Has associated issue:
  • Required feature flags:
  • Changes UI
  • Includes DB Migration (follow approval process in SIP-59)
    • Migration is atomic, supports rollback & is backwards-compatible
    • Confirm DB migration upgrade and downgrade tested
    • Runtime estimates and downtime expectations provided
  • Introduces new feature or API
  • Removes existing feature or API

@justmike1 justmike1 changed the title feat(helm): update redis version feat(helm): update redis version (HIGH PRIORITY) Apr 17, 2023
Signed-off-by: Mike Joseph <mikejoseph@Mikes-MacBook-Pro.local>
@justmike1 justmike1 changed the title feat(helm): update redis version (HIGH PRIORITY) feat(helm): update redis version due to critical CVE (HIGH PRIORITY) Apr 17, 2023
@villebro
Copy link
Member

@justmike1 I believe you need to run helm-docs to update README.md, as that also has a reference to the Redis version.

Signed-off-by: Mike Joseph <mikejoseph@Mikes-MacBook-Pro.local>
@justmike1
Copy link
Contributor Author

@villebro correct, I missed that.

@craig-rueda craig-rueda merged commit 810f52b into apache:master Apr 17, 2023
@justmike1 justmike1 deleted the patch-1 branch April 17, 2023 14:48
sebastianliebscher pushed a commit to sebastianliebscher/superset that referenced this pull request Apr 28, 2023
@mistercrunch mistercrunch added 🏷️ bot A label used by `supersetbot` to keep track of which PR where auto-tagged with release labels 🚢 3.0.0 labels Mar 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🏷️ bot A label used by `supersetbot` to keep track of which PR where auto-tagged with release labels size/S 🚢 3.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants