sonic-buildimage/dockers
Jason Lyu b023c29a1e
[redis] Upgrade redis version (#9757)
#### Why I did it

The current redis version of SONiC is `6.0.6`, which contains many high-risky security issues like CVEs that are fixed in the latest version. The Redis release notes also highly recommend to upgrade with SECURITY urgency.

```
================================================================================
Redis 6.0.16 Released Mon Oct 4 12:00:00 IDT 2021
================================================================================

Upgrade urgency: SECURITY, contains fixes to security issues.

Security Fixes:
* (CVE-2021-41099) Integer to heap buffer overflow handling certain string
  commands and network payloads, when proto-max-bulk-len is manually configured
  to a non-default, very large value [reported by yiyuaner].
* (CVE-2021-32762) Integer to heap buffer overflow issue in redis-cli and
  redis-sentinel parsing large multi-bulk replies on some older and less common
  platforms [reported by Microsoft Vulnerability Research].
* (CVE-2021-32687) Integer to heap buffer overflow with intsets, when
  set-max-intset-entries is manually configured to a non-default, very large
  value [reported by Pawel Wieczorkiewicz, AWS].
* (CVE-2021-32675) Denial Of Service when processing RESP request payloads with
  a large number of elements on many connections.
* (CVE-2021-32672) Random heap reading issue with Lua Debugger [reported by
  Meir Shpilraien].
* (CVE-2021-32628) Integer to heap buffer overflow handling ziplist-encoded
  data types, when configuring a large, non-default value for
  hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries
  or zset-max-ziplist-value [reported by sundb].
* (CVE-2021-32627) Integer to heap buffer overflow issue with streams, when
  configuring a non-default, large value for proto-max-bulk-len and
  client-query-buffer-limit [reported by sundb].
* (CVE-2021-32626) Specially crafted Lua scripts may result with Heap buffer
  overflow [reported by Meir Shpilraien].

Other bug fixes:
* Fix appendfsync to always guarantee fsync before reply, on MacOS and FreeBSD (kqueue) (#9416)
* Fix the wrong mis-detection of sync_file_range system call, affecting performance (#9371)
* Fix replication issues when repl-diskless-load is used (#9280)
```

#### How I did it

Edit `Dockerfile.j2` file

#### How to verify it

Check redis version

#### Description for the changelog
This PR will upgrade redis-server version to `6.0.16`.
2022-02-15 16:43:01 -08:00
..
docker-base Support to build armhf/arm64 platforms on arm based system (#7731) 2021-08-12 22:24:37 +08:00
docker-base-bullseye Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00
docker-base-buster Support to build armhf/arm64 platforms on arm based system (#7731) 2021-08-12 22:24:37 +08:00
docker-base-stretch Support to build armhf/arm64 platforms on arm based system (#7731) 2021-08-12 22:24:37 +08:00
docker-basic_router [supervisord]: use abspath as supervisord entrypoint (#5995) 2020-11-22 21:18:44 -08:00
docker-config-engine [docker-base-buster][docker-config-engine-buster] No longer install Python 2 (#6162) 2020-12-25 21:29:25 -08:00
docker-config-engine-bullseye Create docker-base-bullseye and docker-config-engine-bullseye (#9666) 2022-01-11 09:23:42 -08:00
docker-config-engine-buster [docker-base-buster][docker-config-engine-buster] No longer install Python 2 (#6162) 2020-12-25 21:29:25 -08:00
docker-config-engine-stretch [docker-base-buster][docker-config-engine-buster] No longer install Python 2 (#6162) 2020-12-25 21:29:25 -08:00
docker-database [redis] Upgrade redis version (#9757) 2022-02-15 16:43:01 -08:00
docker-dhcp-relay docker-dhcp-relay: Fix test call to MockConfigDb (#9903) 2022-02-01 18:52:52 -08:00
docker-fpm-frr Updated Internal BGP Templates for chassis packet (#9674) 2022-02-08 09:36:32 -08:00
docker-fpm-gobgp [dockers][supervisor] Increase event buffer size for process exit listener; Set all event buffer sizes to 1024 (#7083) 2021-03-27 21:14:24 -07:00
docker-iccpd add platform to iccpd's env (#8945) 2021-12-08 09:21:44 -08:00
docker-lldp [Monit] Deprecate the feature of monitoring the critical processes by Monit (#7676) 2021-06-04 10:16:53 -07:00
docker-macsec Create a docker-swss-layer that holds the swss package. 2022-01-06 09:26:55 -08:00
docker-mux [mux]: Call write_standby from host only 2021-10-15 09:59:59 -07:00
docker-nat Create a docker-swss-layer that holds the swss package. 2022-01-06 09:26:55 -08:00
docker-orchagent [asan] Add address sanitizer support. (#9857) 2022-02-09 13:29:18 +02:00
docker-pde [PDE]: introduce the SONiC Platform Development Env (#7510) 2021-07-24 16:24:43 -07:00
docker-platform-monitor [pmon] Fix chassis_db_init exit not being expected (#9858) 2022-02-15 10:51:24 +02:00
docker-ptf Add openbfdd to ptf docker (#9488) 2021-12-14 11:46:48 -08:00
docker-router-advertiser [radv] Run radv on MgmtToRRouter (#9424) 2021-12-03 09:45:06 -08:00
docker-sflow Create a docker-swss-layer that holds the swss package. 2022-01-06 09:26:55 -08:00
docker-snmp updated jinja template for snmp contact python2 vs python3 issue (#9949) 2022-02-10 09:01:46 -08:00
docker-sonic-mgmt Support for Statistics Python Module in sonic-mgmt docker image (#9682) 2022-01-25 10:32:22 +08:00
docker-sonic-mgmt-framework [docker-mgmt-framework]: Don't overwrite /etc/passwd and /etc/group with symlinks (#9375) 2021-11-24 23:51:59 -08:00
docker-sonic-p4rt [PINS] Build P4RT container for PINS (#9083) 2021-12-07 11:11:25 -08:00
docker-sonic-restapi Support bullseye for docker-sonic-restapi docker-sonic-telemetry (#9791) 2022-01-21 08:41:39 +08:00
docker-sonic-sdk [sonic-sdk] add sonic sdk and sonic sdk buildenv (#6712) 2021-05-28 10:16:02 -07:00
docker-sonic-sdk-buildenv [sonic-sdk] add sonic sdk and sonic sdk buildenv (#6712) 2021-05-28 10:16:02 -07:00
docker-sonic-telemetry Support bullseye for docker-sonic-restapi docker-sonic-telemetry (#9791) 2022-01-21 08:41:39 +08:00
docker-swss-layer-buster Create a docker-swss-layer that holds the swss package. 2022-01-06 09:26:55 -08:00
docker-teamd Create a docker-swss-layer that holds the swss package. 2022-01-06 09:26:55 -08:00
dockerfile-macros.j2 [sonic-config-engine] Clean up dependencies, pin versions; install Python 3 package in Buster container (#5656) 2020-10-26 13:48:50 -07:00