+++ This bug was initially created as a clone of Bug #2117811 +++
Description of problem:
We are currently unable to merge any pull requests to fix CVEs because of the use of the xmlstarlet command line utility which is not currently packaged for and available for RHEL.
Version-Release number of selected component (if applicable):
How reproducible:
ALways
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
Another bug will be opened to reenable this code once the xmlstarlet package is available in RHEL or we find an alternative fix.
- blocks
-
OCPBUGS-471 Various Jenkins CVEs for August 2022 [openshift-4.11.z]
- Closed
-
OCPBUGS-726 Various Jenkins CVEs for August 2022 [openshift-4.10.z]
- Closed
- depends on
-
OCPBUGS-868 Disable xmlstarlet code to fix current CVEs [release-4.11]
- Closed
- is cloned by
-
OCPBUGS-868 Disable xmlstarlet code to fix current CVEs [release-4.11]
- Closed
- links to
- mentioned on