Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-400

Disable xmlstarlet code to fix current CVEs [release-4.10]

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • None
    • 4.10
    • Jenkins
    • None
    • Important
    • Sprint 223, Sprint 224
    • 2
    • False
    • Hide

      None

      Show
      None

    Description

      +++ This bug was initially created as a clone of Bug #2117811 +++

      Description of problem:
      We are currently unable to merge any pull requests to fix CVEs because of the use of the xmlstarlet command line utility which is not currently packaged for and available for RHEL.

      Version-Release number of selected component (if applicable):

      How reproducible:
      ALways

      Steps to Reproduce:
      1.
      2.
      3.

      Actual results:

      Expected results:

      Additional info:
      Another bug will be opened to reenable this code once the xmlstarlet package is available in RHEL or we find an alternative fix.

      Attachments

        Issue Links

          blocks

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-471 Various Jenkins CVEs for August 2022 [openshift-4.11.z]

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-726 Various Jenkins CVEs for August 2022 [openshift-4.10.z]

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          depends on

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-868 Disable xmlstarlet code to fix current CVEs [release-4.11]

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-868 Disable xmlstarlet code to fix current CVEs [release-4.11]

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          links to

          GitHub openshift/jenkins#1469: [release-4.10] OCPBUGS-400: Revert xmlstarlet usage

          mentioned on

          GitLab Merge request - Updated US source to: 67bd879 Merge pull request #1480 from divyansh42/release_4_10_warning_fix

          GitLab Merge request - Updated US source to: a4845c1 Merge pull request #1477 from openshift-cherrypick-robot/cherry-pick-1471-to-release-4.10

          GitLab Merge request - Updated US source to: a4845c1 Merge pull request #1477 from openshift-cherrypick-robot/cherry-pick-1471-to-release-4.10

          Activity

            People

              cdaley Corey Daley
              cdaley Corey Daley
              Jitendar Singh Jitendar Singh
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: