[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade redis to 6.2.18 for CVE-2025-21605 [HIGH] - branch main (#13675)

CBL-Mariner-Bot · jslobodzian · web-flow · commit 36054cca9664 · 2025-05-06T14:22:29.000-04:00
Co-authored-by: jslobodzian &lt;joslobo@microsoft.com&gt;
diff --git a/SPECS/redis/redis.signatures.json b/SPECS/redis/redis.signatures.json
@@ -1,5 +1,5 @@
 {
   "Signatures": {
-    "redis-6.2.17.tar.gz": "f7aab300407aaa005bc1a688e61287111f4ae13ed657ec50ef4ab529893ddc30"
+    "redis-6.2.18.tar.gz": "470c75bac73d7390be4dd66479c6f29e86371c5d380ce0c7efb4ba2bbda3612d"
   }
 }
diff --git a/SPECS/redis/redis.spec b/SPECS/redis/redis.spec
@@ -1,6 +1,6 @@
 Summary:        advanced key-value store
 Name:           redis
-Version:        6.2.17
+Version:        6.2.18
 Release:        1%{?dist}
 License:        BSD
 Vendor:         Microsoft Corporation
@@ -84,6 +84,9 @@ exit 0
 %config(noreplace) %attr(0640, %{name}, %{name}) %{_sysconfdir}/redis.conf
 
 %changelog
+* Wed Apr 30 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 6.2.18-1
+- Auto-upgrade to 6.2.18 - for CVE-2025-21605
+
 * Mon Jan 13 2025 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 6.2.17-1
 - Auto-upgrade to 6.2.17 - Upgrade redis to fix CVE-2024-46981
 
diff --git a/cgmanifest.json b/cgmanifest.json
@@ -25574,8 +25574,8 @@
         "type": "other",
         "other": {
           "name": "redis",
-          "version": "6.2.17",
-          "downloadUrl": "https://download.redis.io/releases/redis-6.2.17.tar.gz"
+          "version": "6.2.18",
+          "downloadUrl": "https://download.redis.io/releases/redis-6.2.18.tar.gz"
         }
       }
     },

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`	`1`	`{`
`2`	`2`	`"Signatures": {`
`3`		`- "redis-6.2.17.tar.gz": "f7aab300407aaa005bc1a688e61287111f4ae13ed657ec50ef4ab529893ddc30"`
	`3`	`+ "redis-6.2.18.tar.gz": "470c75bac73d7390be4dd66479c6f29e86371c5d380ce0c7efb4ba2bbda3612d"`
`4`	`4`	`}`
`5`	`5`	`}`
Original file line number	Diff line number	Diff line change
`@@ -25574,8 +25574,8 @@`
`25574`	`25574`	`"type": "other",`
`25575`	`25575`	`"other": {`
`25576`	`25576`	`"name": "redis",`
`25577`		`- "version": "6.2.17",`
`25578`		`- "downloadUrl": "https://download.redis.io/releases/redis-6.2.17.tar.gz"`
	`25577`	`+ "version": "6.2.18",`
	`25578`	`+ "downloadUrl": "https://download.redis.io/releases/redis-6.2.18.tar.gz"`
`25579`	`25579`	`}`
`25580`	`25580`	`}`
`25581`	`25581`	`},`