From 74de59ef4a3f00d2bb3e1d12987dbc15a38eb122 Mon Sep 17 00:00:00 2001
From: Bitnami Bot <bitnami.bot@broadcom.com>
Date: Fri, 7 Aug 2026 17:43:18 +0200
Subject: [PATCH] [bitnami/redis-sentinel] Release 8.10.0-debian-12-r2 (#96153)

Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
---
 .../redis-sentinel/8.10/debian-12/Dockerfile  |  4 +--
 .../opt/bitnami/scripts/libredissentinel.sh   | 26 ++++++++++++++++---
 2 files changed, 24 insertions(+), 6 deletions(-)

diff --git a/bitnami/redis-sentinel/8.10/debian-12/Dockerfile b/bitnami/redis-sentinel/8.10/debian-12/Dockerfile
index 382a1f7c58b8..147d67915f06 100644
--- a/bitnami/redis-sentinel/8.10/debian-12/Dockerfile
+++ b/bitnami/redis-sentinel/8.10/debian-12/Dockerfile
@@ -7,7 +7,7 @@ ARG DOWNLOADS_URL="https://downloads.bitnami.com/files/stacksmith"
 ARG TARGETARCH
 
 LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2026-08-05T15:24:52Z" \
+      org.opencontainers.image.created="2026-08-07T15:14:00Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/redis-sentinel/README.md" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/redis-sentinel" \
@@ -50,7 +50,7 @@ COPY rootfs /
 RUN /opt/bitnami/scripts/redis-sentinel/postunpack.sh
 ENV APP_VERSION="8.10.0" \
     BITNAMI_APP_NAME="redis-sentinel" \
-    IMAGE_REVISION="1"
+    IMAGE_REVISION="2"
 
 EXPOSE 26379
 
diff --git a/bitnami/redis-sentinel/8.10/debian-12/rootfs/opt/bitnami/scripts/libredissentinel.sh b/bitnami/redis-sentinel/8.10/debian-12/rootfs/opt/bitnami/scripts/libredissentinel.sh
index 9b41644275cc..f74552eafa78 100644
--- a/bitnami/redis-sentinel/8.10/debian-12/rootfs/opt/bitnami/scripts/libredissentinel.sh
+++ b/bitnami/redis-sentinel/8.10/debian-12/rootfs/opt/bitnami/scripts/libredissentinel.sh
@@ -31,10 +31,28 @@ redis_conf_set() {
     local value="${2:-}"
 
     # Sanitize inputs
-    value="${value//\\/\\\\}"
-    value="${value//&/\\&}"
-    value="${value//\?/\\?}"
-    [[ "$value" = "" ]] && value="\"$value\""
+    value="${value//[$'\001'-$'\037'$'\177']}"
+
+    case "$key" in
+        requirepass)
+            # Holds a single opaque string value (password) that may contain spaces, '#', quotes
+            # or backslashes. Format as a double-quoted Redis config string so the parser handles
+            # it safely. Other keys (e.g. "sentinel auth-pass", "sentinel monitor") pack multiple
+            # space-separated tokens into $value and must NOT be quoted as a whole.
+            value="${value//\\/\\\\}"
+            value="${value//\"/\\\"}"
+            value="\"${value}\""
+            # Escape for sed replacement string in replace_in_file (\ -> \\, & -> \&)
+            value="${value//\\/\\\\}"
+            value="${value//&/\\&}"
+            ;;
+        *)
+            value="${value//\\/\\\\}"
+            value="${value//&/\\&}"
+            value="${value//\?/\\?}"
+            [[ "$value" = "" ]] && value="\"\""
+            ;;
+    esac
 
     if grep -q "^\s*$key .*" "$REDIS_SENTINEL_CONF_FILE"; then
         replace_in_file "$REDIS_SENTINEL_CONF_FILE" "^\s*${key} .*" "${key} ${value}" false