Bug 2123752

Summary:	Rebase to 0.7.1 [OSP 16.2]
Product:	Red Hat OpenStack	Reporter:	Lon Hohberger <lhh>
Component:	python-defusedxml	Assignee:	Lon Hohberger <lhh>
Status:	CLOSED ERRATA	QA Contact:	Lon Hohberger <lhh>
Severity:	medium	Docs Contact:
Priority:	high
Version:	16.2 (Train)	CC:	jschluet
Target Milestone:	z4	Keywords:	Rebase, Triaged
Target Release:	16.2 (Train on RHEL 8.4)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	python-defusedxml-0.7.1-1.el8ost	Doc Type:	Rebase: Bug Fixes and Enhancements
Doc Text:		Story Points:	---
Clone Of:
Clones:	2123761 (view as bug list)		Environment:
Last Closed:	2022-12-07 19:24:40 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2119228, 2123761

Description Lon Hohberger 2022-09-02 14:09:22 UTC

Description of problem: In order to fix CVE-2022-2996 in python-scciclient, we need to rebase python-defusedxml to 0.6.0

Version-Release number of selected component (if applicable): python-defusedxml-0.5.0-7.el8ost.1

https://opendev.org/x/python-scciclient/commit/20931fc474afe981b5965cd9b0d02cdef8b812bf

Comment 11 errata-xmlrpc 2022-12-07 19:24:40 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 16.2.4), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:8794