<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Thu Feb 08 23:31:39 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[FOLIO-3904] Rebuild jenkins-slave-docker fixing curl CVEs</title>
                <link>https://folio-org.atlassian.net/browse/FOLIO-3904</link>
                <project id="10290" key="FOLIO">FOLIO</project>
                    <description>&lt;p&gt;&lt;a href=&quot;https://github.com/folio-org/folio-tools/blob/master/jenkins-slave-docker/Dockerfile.jammy-java-11&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/folio-tools/blob/master/jenkins-slave-docker/Dockerfile.jammy-java-11&lt;/a&gt; and&lt;br/&gt;
&lt;a href=&quot;https://github.com/folio-org/folio-tools/blob/master/jenkins-slave-docker/Dockerfile.jammy-java-17&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/folio-org/folio-tools/blob/master/jenkins-slave-docker/Dockerfile.jammy-java-17&lt;/a&gt;&lt;br/&gt;
use vulnerable 7.81.0-1ubuntu1.13 version of curl/libcurl&lt;br/&gt;
This version has two security vulnerabilities (CVE-2023-38545, CVE-2023-38546), one of them of high severity:&lt;br/&gt;
&lt;a href=&quot;https://github.com/curl/curl/discussions/12026&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://github.com/curl/curl/discussions/12026&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Ubuntun will release a fixed version on October 11, 2023.&lt;br/&gt;
Please check &lt;a href=&quot;https://packages.ubuntu.com/search?suite=jammy-updates&amp;amp;section=all&amp;amp;arch=any&amp;amp;keywords=curl&amp;amp;searchon=names&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;https://packages.ubuntu.com/search?suite=jammy-updates&amp;amp;section=all&amp;amp;arch=any&amp;amp;keywords=curl&amp;amp;searchon=names&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;If you see that the fixed version is available please rebuild FOLIO&apos;s two jenkins-slave-docker containers. No change to the Dockerfiles is needed because they automatically run &quot;apt-get upgrade&quot; at build time.&lt;br/&gt;
&#160;&lt;/p&gt;</description>
                <environment></environment>
        <key id="82588">FOLIO-3904</key>
            <summary>Rebuild jenkins-slave-docker fixing curl CVEs</summary>
                <type id="10003" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10318?size=medium">Task</type>
                                            <priority id="10001" iconUrl="https://dev.folio.org/assets/jira-priority/jira-p2.svg">P2</priority>
                        <status id="6" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10003">Done</resolution>
                                                        <assignee accountid="61cd0ca0bce5e00069e98be7">David Crossley</assignee>
                                                                <reporter accountid="5ee89462f7aa140abd82d11d">Julian Ladisch</reporter>
                                    <labels>
                            <label>security</label>
                            <label>security-reviewed</label>
                    </labels>
                <created>Fri, 6 Oct 2023 09:24:15 +0000</created>
                <updated>Wed, 18 Oct 2023 04:08:00 +0000</updated>
                            <resolved>Wed, 18 Oct 2023 04:08:00 +0000</resolved>
                                                                    <component>Continuous Integration</component>
                        <due></due>
                            <votes>0</votes>
                                    <watches>3</watches>
                                                                <comments>
                                                            <comment id="196373" author="61cd0ca0bce5e00069e98be7" created="Fri, 13 Oct 2023 01:11:32 +0000"  >&lt;p&gt;I am away on holidays. Back Tuesday my time. No promises.&lt;/p&gt;</comment>
                                                            <comment id="196374" author="61cd0ca0bce5e00069e98be7" created="Wed, 18 Oct 2023 04:07:47 +0000"  >&lt;p&gt;The new images are built, tested, and pushed as:&lt;br/&gt;
&quot;folioci/jenkins-slave-all:java-17&quot; and &quot;3.0.11&quot;.&lt;br/&gt;
&quot;folioci/jenkins-slave-all:java-11&quot; and &quot;2.10.11&quot;.&lt;/p&gt;</comment>
                    </comments>
                    <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10057" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Development Team</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10155"><![CDATA[FOLIO DevOps]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10063" key="com.atlassian.jira.plugin.system.customfieldtypes:float">
                        <customfieldname>PO Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                    <customfield id="customfield_10106" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>RCA Group</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10367"><![CDATA[TBD]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|i087q0:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="1897">DevOps Requests</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Fri, 13 Oct 2023 01:11:32 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10025" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>[CHART] Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>