[Security] Fix the redis security issue CVE-2023-28858 and CVE-2023-2…

…8859 (#139)

[Security] Fix the redis security issue CVE-2023-28858 and CVE-2023-28859

Upgrade the redis version from 2.10.5 to 4.5.4

azurepipeline.yml

@@ -10,7 +10,7 @@ pr:
 jobs:
 - job: Build
   pool:
-    vmImage: ubuntu-18.04
+    vmImage: ubuntu-20.04
 
   variables:
     DIFF_COVER_CHECK_THRESHOLD: 80
@@ -21,6 +21,11 @@ jobs:
     - checkout: self
       clean: true
 
+    # TODO: upgrade to python3
+    - task: UsePythonVersion@0
+      inputs:
+        versionSpec: '2.7'
+
     - script: |
         set -ex
         ./build.sh
@@ -58,7 +63,7 @@ jobs:
         set -ex
         # Install .NET CORE
         curl -sSL https://packages.microsoft.com/keys/microsoft.asc | sudo apt-key add -
-        sudo apt-add-repository https://packages.microsoft.com/ubuntu/18.04/prod
+        sudo apt-add-repository https://packages.microsoft.com/ubuntu/20.04/prod
         sudo apt-get update
         sudo apt-get install -y dotnet-sdk-5.0
       displayName: "Install .NET CORE"

test/requirements.txt

@@ -1,2 +1,2 @@
-redis==2.10.5
+redis==4.5.4
 requests==2.25.0