(RHSA-2019:1423) Important: Red Hat OpenShift Container Platform 3.11 jenkins-2-plugins security update

Red Hat OpenShift Container Platform is Red Hat’s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.

Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron.

Security Fix(es):

• jenkins-plugin-script-security: Sandbox bypass in Script Security Plugin and Pipeline: Groovy Plugin (CVE-2019-1003040)

• jenkins-plugin-workflow-cps: Sandbox bypass in Script Security Plugin and Pipeline: Groovy Plugin (CVE-2019-1003041)

• jenkins-plugin-lockable-resources: XSS vulnerability in Lockable Resources Plugin (CVE-2019-1003042)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.