RHEL 8 : OpenShift Developer Tools and Services for OCP 4.12 (RHSA-2023:1064)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:1064 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3198)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3198 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

Critical: Red Hat Security Advisory: OpenShift Developer Tools and Services for OCP 4.12 security update

An update for Jenkins and Jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.12. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

org.jenkins-ci.plugins:gradle (2.12.0.1) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1138.v8e727069a_025)

org.jenkins-ci.plugins:script-security MAVEN version 1138.v8e727069a025 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:gradle 2.12.0.1 Source cves: CVE-2022-43404...

org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-api (>=2.32, <=2.34), org.jenkins-ci.plugins.pipeline-stage-view:pipeline-stage-view (>=2.32, <=2.34) +2 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (2660.vb_c0412dc4e6d)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2660.vbc0412dc4e6d is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.pipeline-stage-view:pipeline-rest-a...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.3), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.3) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (1.3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.3 -...

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.8, <=2.9) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (2.30)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps-global-lib =2.8, =2.9 Sourc...

io.jenkins.plugins:tricentis-ci (>=1.0, <=1.3), org.jenkins-ci.plugins.workflow:workflow-cps (>=2.37, <=2.38) +3 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.30)

org.jenkins-ci.plugins:script-security MAVEN version 1.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:tricentis-ci =1.0, =2.37, =1.22-beta-1, =1.10, =1.5, =1.6 Source...

de.tracetronic.jenkins.plugins:ecu-test-execution (>=3.0, <=3.4), jp.ikedam.jenkins.plugins:extensible-choice-parameter (1.8.1) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1158.v7c1b_73a_69a_08)

org.jenkins-ci.plugins:script-security MAVEN version 1158.v7c1b73a69a08 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.tracetronic.jenkins.plugins:ecu-test-execution =3.0, =3.4 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-1, <=0.1-beta-4), org.jenkins-ci.plugins.workflow:workflow-cps (>=0.1-beta-1, <=0.1-beta-4) +1 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.4)

org.jenkins-ci.plugins:script-security MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-1, =0.1-beta-1,...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-8), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (0.1-beta-8) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-8 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.5), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.5) +1 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (1.5)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.5 -...

io.jenkins.blueocean:blueocean (>=1.0-alpha-3, <=1.0.0-b01), io.jenkins.blueocean:blueocean-dashboard (>=1.0-alpha-3, <=1.0.0-b01) +4 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (2.8)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0-alpha-3, =1.0-alpha-3, =1.0-alpha-3,...

org.jenkins-ci.plugins:gradle (>=1.37.1, <=1.40) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (2.74)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.74 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:gradle =1.37.1, =1.40 Source cves: CVE-2022-43404...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.10-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.10-beta-1) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (1.10-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.10-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.10-beta-1 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.1) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (1.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.1 -...

io.jenkins.blueocean:blueocean (>=1.0.0-b25, <=1.1.0-beta-9), io.jenkins.blueocean:blueocean-dashboard (>=1.0.0-b25, <=1.0.1) +11 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (2.29)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.blueocean:blueocean =1.0.0-b25, =1.0.0-b25, =1.0.0-b25,...

com.testinium.jenkins:testinium (1.0), me.vickychijwani.jenkins:labelled-steps (1.0) +29 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins:script-security (1.25)

org.jenkins-ci.plugins:script-security MAVEN version 1.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - com.testinium.jenkins:testinium 1.0 - me.vickychijwani.jenkins:labelled-steps 1.0 -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (0.1-beta-4) potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (0.1-beta-4)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 0.1-beta-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 0.1-beta-4...

com.testinium.jenkins:testinium (1.0), de.taimos:pipeline-aws (>=1.14, <=1.20) +10 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (2.24)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.testinium.jenkins:testinium 1.0 - de.taimos:pipeline-aws =1.14,...