https://bugzilla.redhat.com/show_bug.cgi?id=1942633
--- Comment #3 from amctagga(a)redhat.com ---
Statement:
OpenShift Container Platform (OCP) delivers Jenkins LTS package with bundled
XStream library. Due to JEP-200 [1] and JEP-228 [2] Jenkins projects, OCP
Jenkins package is not affected by this flaw.
[1]
https://github.com/jenkinsci/jep/blob/master/jep/200/README.adoc
[2]
https://github.com/jenkinsci/jep/blob/master/jep/228/README.adoc#security
--
You are receiving this mail because:
You are on the CC list for the bug.