Skip to content

Incorporate Redis CVE for CVE-2025-27151 #2146

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
May 28, 2025
Merged

Incorporate Redis CVE for CVE-2025-27151 #2146

merged 2 commits into from
May 28, 2025

Conversation

@madolson
Copy link
Member

@madolson madolson commented May 28, 2025

Resolves #2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

@madolson madolson added the release-notes This issue should get a line item in the release notes label May 28, 2025
@madolson madolson changed the title Incorporate Redis CVE Incorporate Redis CVE for CVE-2025-27151 May 28, 2025
@madolson madolson requested a review from PingXie May 28, 2025 17:34
PingXie
PingXie reviewed May 28, 2025
View reviewed changes
@codecov
Copy link

codecov bot commented May 28, 2025 •
edited
Loading

Codecov Report

Attention: Patch coverage is 33.33333% with 2 lines in your changes missing coverage. Please review.

Project coverage is 71.31%. Comparing base (ff71358) to head (7a95027).
Report is 5 commits behind head on unstable.

Files with missing lines Patch % Lines
src/valkey-check-aof.c 33.33% 2 Missing ⚠️
Additional details and impacted files 
@@            Coverage Diff            @@
##           unstable    #2146   +/-   ##
=========================================
  Coverage     71.31%   71.31%           
=========================================
  Files           122      122           
  Lines         66144    66155   +11     
=========================================
+ Hits          47170    47179    +9     
- Misses        18974    18976    +2
Files with missing lines Coverage Δ
src/valkey-check-aof.c 74.07% <33.33%> (-0.42%) ⬇️

... and 13 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@madolson @PingXie
Update src/valkey-check-aof.c
7a95027 
Co-authored-by: Ping Xie <[email protected]>
Signed-off-by: Madelyn Olson <[email protected]>
@madolson madolson merged commit 73696bf into valkey-io:unstable May 28, 2025
51 checks passed
@github-project-automation github-project-automation bot moved this to To be backported in Valkey 7.2 May 28, 2025
@github-project-automation github-project-automation bot moved this to To be backported in Valkey 8.1 May 28, 2025
@github-project-automation github-project-automation bot moved this to To be backported in Valkey 8.0 May 28, 2025
hpatro pushed a commit to hpatro/valkey that referenced this pull request Jun 4, 2025
@madolson @PingXie @hpatro
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
64ff078 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
hpatro pushed a commit to hpatro/valkey that referenced this pull request Jun 4, 2025
@madolson @PingXie @hpatro
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
4d32912 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
Signed-off-by: Harkrishn Patro <[email protected]>
hpatro pushed a commit that referenced this pull request Jun 9, 2025
@madolson @PingXie @hpatro
Incorporate Redis CVE for CVE-2025-27151 (#2146)
c884ce8 
Resolves #2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
Signed-off-by: Harkrishn Patro <[email protected]>
hpatro pushed a commit that referenced this pull request Jun 11, 2025
@madolson @PingXie @hpatro
Incorporate Redis CVE for CVE-2025-27151 (#2146)
35c0138 
Resolves #2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
Signed-off-by: Harkrishn Patro <[email protected]>
@hpatro hpatro moved this from To be backported to 8.1.2 in Valkey 8.1 Jun 11, 2025
chzhoo pushed a commit to chzhoo/valkey that referenced this pull request Jun 12, 2025
@madolson @PingXie @chzhoo
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
939f56e 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
Signed-off-by: chzhoo <[email protected]>
vitarb pushed a commit to vitarb/valkey that referenced this pull request Jun 12, 2025
@madolson @PingXie @vitarb
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
baad892 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
(cherry picked from commit 73696bf)
@vitarb vitarb mentioned this pull request Jun 13, 2025
Merged
vitarb pushed a commit to vitarb/valkey that referenced this pull request Jun 13, 2025
@madolson @PingXie @vitarb
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
52e69e6 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
(cherry picked from commit 73696bf)
shanwan1 pushed a commit to shanwan1/valkey that referenced this pull request Jun 13, 2025
@madolson @PingXie
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
9a74469 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
Signed-off-by: shanwan1 <[email protected]>
@FliegendeWurst FliegendeWurst mentioned this pull request Jun 14, 2025
Merged
13 tasks
@LeSuisse LeSuisse mentioned this pull request Jun 14, 2025
Merged
13 tasks
@ranshid ranshid moved this from To be backported to In Progress in Valkey 7.2 Jun 18, 2025
ranshid pushed a commit to ranshid/valkey that referenced this pull request Jun 18, 2025
@madolson @PingXie @ranshid
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
ade6c7d 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
ranshid pushed a commit to ranshid/valkey that referenced this pull request Jun 22, 2025
@madolson @PingXie @ranshid
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
a5a5048 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
ranshid pushed a commit that referenced this pull request Jul 7, 2025
@madolson @PingXie @ranshid
Incorporate Redis CVE for CVE-2025-27151 (#2146)
4d834c8 
Resolves #2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
zuiderkwast pushed a commit to vitarb/valkey that referenced this pull request Aug 15, 2025
@madolson @PingXie @zuiderkwast
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
a710097 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
(cherry picked from commit 73696bf)
zuiderkwast pushed a commit to vitarb/valkey that referenced this pull request Aug 15, 2025
@madolson @PingXie @zuiderkwast
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
3e6f262 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
(cherry picked from commit 73696bf)
Signed-off-by: Viktor Söderqvist <[email protected]>
@zuiderkwast zuiderkwast moved this from To be backported to 8.0.5 in Valkey 8.0 Aug 18, 2025
zuiderkwast pushed a commit to vitarb/valkey that referenced this pull request Aug 21, 2025
@madolson @PingXie @zuiderkwast
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
05213cf 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
(cherry picked from commit 73696bf)
Signed-off-by: Viktor Söderqvist <[email protected]>
zuiderkwast pushed a commit that referenced this pull request Aug 22, 2025
@madolson @PingXie @zuiderkwast
Incorporate Redis CVE for CVE-2025-27151 (#2146)
242501e 
Resolves #2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
(cherry picked from commit 73696bf)
Signed-off-by: Viktor Söderqvist <[email protected]>
sarthakaggarwal97 pushed a commit to sarthakaggarwal97/valkey that referenced this pull request Sep 16, 2025
@madolson @PingXie @sarthakaggarwal97
Incorporate Redis CVE for CVE-2025-27151 (valkey-io#2146)
32d0790 
Resolves valkey-io#2145

Incorporate the CVE patch that was sent to us by Redis Ltd.

---------

Signed-off-by: Madelyn Olson <[email protected]>
Co-authored-by: Ping Xie <[email protected]>
(cherry picked from commit 73696bf)
Signed-off-by: Viktor Söderqvist <[email protected]>
@zuiderkwast zuiderkwast moved this from In Progress to To be backported in Valkey 7.2 Sep 23, 2025
@rainsupreme rainsupreme moved this from To be backported to 7.2.10 in Valkey 7.2 Sep 29, 2025
@Kanishk-Bansal Kanishk-Bansal mentioned this pull request Oct 8, 2025
Merged
12 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@PingXie PingXie PingXie approved these changes

Assignees

No one assigned

Labels

release-notes This issue should get a line item in the release notes

Projects

Valkey 7.2
Status: 7.2.10
Valkey 8.0
Status: 8.0.5
Valkey 8.1
Status: 8.1.2

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

CVE-2025-27151

2 participants

@madolson @PingXie