Bug 1798622

Summary: oc adm release info --changelog does not escape html
Product: OpenShift Container Platform Reporter: Eric Paris <eparis>
Component: ocAssignee: Maciej Szulik <maszulik>
Status: CLOSED ERRATA QA Contact: zhou ying <yinzhou>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 4.4CC: aos-bugs, jokerman, mfojtik
Target Milestone: ---   
Target Release: 4.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-05-13 21:56:18 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Eric Paris 2020-02-05 17:11:18 UTC
For example if you run:
oc adm release info --changelog=/home/eparis/go/src/ --changes-from=quay.io/openshift-release-dev/ocp-release:4.2.16-x86_64 registry.svc.ci.openshift.org/ocp/release:4.3.0-0.ci-2020-02-04-004213

you will see that the output includes <title> in some of the lines

If you run with this fixed you should instead see:
&lt;title&gt

Comment 2 zhou ying 2020-02-11 03:25:17 UTC
Confirmed with latest oc client, can't reproduce the issue now:
[root@dhcp-140-138 tmp]#  oc version -o yaml 
clientVersion:
  buildDate: "2020-02-10T17:21:47Z"
  compiler: gc
  gitCommit: ee05f83cb8f0bee84c0a1516591437cd71befdc8
  gitTreeState: clean
  gitVersion: v4.4.0
  goVersion: go1.13.4
  major: ""
  minor: ""
  platform: linux/amd64

Comment 4 errata-xmlrpc 2020-05-13 21:56:18 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0581