(RHSA-2020:3808) Important: OpenShift Container Platform 4.3.38 jenkins and openshift security update

Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.

Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cron.

Security Fix(es):

• jenkins: Stored XSS vulnerability in job build time trend (CVE-2020-2220)

• jenkins: Stored XSS vulnerability in upstream cause (CVE-2020-2221)

• jenkins: Stored XSS vulnerability in ‘keep forever’ badge icons (CVE-2020-2222)

• jenkins: Stored XSS vulnerability in console links (CVE-2020-2223)

• kubernetes: Node disk DOS by writing to container /etc/hosts (CVE-2020-8557)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.