https://bugzilla.redhat.com/show_bug.cgi?id=1903702
--- Comment #7 from Mark Cooper mcooper@redhat.com --- OpenShift packages a vulnerable version of ant in the following components: - OpenShift 3.11, jenkins, ant.jar-1.10.7 - OpenShift 4.6, jenkins, ant.jar-1.10.7 - OpenShift 4.6, hive-container, ant-1.9.1