https://bugzilla.redhat.com/show_bug.cgi?id=2126789
--- Comment #29 from Severin Gehwolf <sgehwolf(a)redhat.com> ---
(In reply to spencer.deehring from comment #28)
I see that package prometheus-jmx-exporter has been updated in RHEL 8
to
0.12.0-8.el8_6 as per RHSA-2022:6820. However the sub package
prometheus-jmx-exporter-openjdk8 has not been updated and still contains
this CVE. Are there plans to resolve this?
Sorry about that. This should not have happened. I'll get motions started to
get relevant sub-package builds pushed as well. Appropriate root-cause analysis
is ongoing why this happened in the first place. Thanks for letting us know!
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2126789