RHSA-2019:1636: Important: OpenShift Container Platform 4.1 jenkins-2-plugins security update

This advisory contains the jenkins-2-plugins RPM packages for Red HatOpenShift Container Platform 4.1.4. See the following advisory for thecontainer images for this release:https://access.redhat.com/errata/RHBA-2019:1635 Security Fix(es): jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (CVE-2019-10328) jenkins-credentials-plugin: Certificate file read vulnerability in Credentials Plugin (CVE-2019-10320) jenkins-plugin-token-macro: XML External Entity processing the ${XML} macro (CVE-2019-10337)For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage(s) listed in the References section.You may download the oc tool and use it to inspect release image metadataas follows:$ oc adm release info quay.io/openshift-release-dev/ocp-release:4.1.4The image digest is sha256:a6c177eb007d20bb00bfd8f829e99bd40137167480112bd5ae1c25e40a4a163aAll OpenShift Container Platform 4.1 users are advised to upgrade to theseupdated packages and images.