Skip to content

Update libxml2 2.14.5#27198

Merged
dotnwat merged 1 commit intoredpanda-data:devfrom
BenPope:update-libxml2-2.14.5
Aug 12, 2025
Merged

Update libxml2 2.14.5#27198
dotnwat merged 1 commit intoredpanda-data:devfrom
BenPope:update-libxml2-2.14.5

Conversation

@BenPope
Copy link
Copy Markdown
Contributor

@BenPope BenPope commented Aug 11, 2025

Fixes a high sev vuln: https://security.snyk.io/vuln/SNYK-UNMANAGED-LIBXML2-10674189

NOTE: This PR contains the update to seastar in #27115 , or it'll just collide anyway.

I'll do backports manually.

Backports Required

  • none - not a bug fix
  • none - this is a backport
  • none - issue does not exist in previous branches
  • none - papercut/not impactful enough to backport
  • v25.2.x
  • v25.1.x
  • v24.3.x

Release Notes

  • none

Copy link
Copy Markdown
Contributor

@pgellert pgellert left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could you please add the motivation for the change into the PR header / commit message (i.e. why now)?

Lgtm. Not approving yet since I assume you'll need to rebase to dev once again when #27115 merges.

@BenPope
Copy link
Copy Markdown
Contributor Author

BenPope commented Aug 11, 2025

Could you please add the motivation for the change into the PR header / commit message (i.e. why now)?

Done.

Lgtm. Not approving yet since I assume you'll need to rebase to dev once again when #27115 merges.

I hope not.

@pgellert
Copy link
Copy Markdown
Contributor

I hope not.

I think once #27115 merges the merged commit will be a different commit (hash) than 1d2e857 since it will be in a different repo. So I think if you merge this on, this will create 2 separate commits for the first. But I haven't verified this, this is just what I would expect.

@vbotbuildovich
Copy link
Copy Markdown
Collaborator

vbotbuildovich commented Aug 11, 2025

CI test results

test results on build#70553
test_class test_method test_arguments test_kind job_url test_status passed reason
RandomDistributionMultiPass/CompactionFixtureTombstonesMultiPassRandomParamTest TestTombstonesMultiPassRandomDistribution/3 unit https://buildkite.com/redpanda/redpanda/builds/70553#01989994-695e-4d7e-94d9-b896a2fad5fe FAIL 0/1
ClusterConfigTest test_valid_settings null integration https://buildkite.com/redpanda/redpanda/builds/70553#01989a0b-4dc5-4fe2-a3a8-a83ab2b49283 FLAKY 20/21 upstream reliability is '100.0'. current run reliability is '95.23809523809523'. drift is 4.7619 and the allowed drift is set to 50. The test should PASS
ShardPlacementTest test_node_join {"disable_license": true} integration https://buildkite.com/redpanda/redpanda/builds/70553#01989a0b-4dc4-48a9-90cb-4b24473aa839 FLAKY 20/21 upstream reliability is '100.0'. current run reliability is '95.23809523809523'. drift is 4.7619 and the allowed drift is set to 50. The test should PASS
test results on build#70601
test_class test_method test_arguments test_kind job_url test_status passed reason
RandomNodeOperationsTest test_node_operations {"cloud_storage_type": 2, "compaction_mode": "chunked_sliding_window", "enable_failures": true, "mixed_versions": true, "with_iceberg": false} integration https://buildkite.com/redpanda/redpanda/builds/70601#01989c3f-e6f6-4f7a-bcc7-97704dd3a024 FLAKY 19/21 upstream reliability is '99.53051643192488'. current run reliability is '90.47619047619048'. drift is 9.05433 and the allowed drift is set to 50. The test should PASS

@BenPope BenPope enabled auto-merge August 11, 2025 18:24
@BenPope BenPope disabled auto-merge August 11, 2025 18:25
Signed-off-by: Ben Pope <ben@redpanda.com>
@dotnwat dotnwat force-pushed the update-libxml2-2.14.5 branch from a73aff2 to bd6c574 Compare August 12, 2025 02:13
@dotnwat dotnwat enabled auto-merge August 12, 2025 02:13
@dotnwat dotnwat merged commit e5abad6 into redpanda-data:dev Aug 12, 2025
16 checks passed
@BenPope BenPope mentioned this pull request Aug 12, 2025
7 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants