Critical: Red Hat Security Advisory: OpenShift Container Platform 4.10.56 security update

Red Hat OpenShift Container Platform release 4.10.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10. Red Hat Product Security has rated this update as having a...

CVE-2023-27898

A flaw was found in Jenkins. Affected versions of Jenkins do not escape the Jenkins version that a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins in the plugin manager. This issue results in a stored Cross-site scripting XSS...

org.jenkins-ci.main:jenkins-test-harness (1.444), org.jenkins-ci.main:jenkins-war (1.444) +10 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.444)

org.jenkins-ci.main:jenkins-core MAVEN version 1.444 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.444 - org.jenkins-ci.main:jenkins-war 1.444 -...

org.jenkins-ci.main:jenkins-test-harness (1.554.3.jenkins-18065-allrm-all), org.jenkins-ci.main:jenkins-war (1.554.3.jenkins-18065-allrm-all) +1 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.554.3.jenkins-18065-allrm-all)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.3.jenkins-18065-allrm-all is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness...

hudson.plugins.libvirt:libvirt-slave (1.7), net.praqma:matrix-reloaded (>=1.1.1, <=1.1.3) +60 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.420)

org.jenkins-ci.main:jenkins-core MAVEN version 1.420 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.libvirt:libvirt-slave 1.7 - net.praqma:matrix-reloaded =1.1.1, =1.8, =1.2, =1.7,...

com.nirima.jenkins.repository:jenkins-maven-plugin (1.0), com.nirima.jenkins.repository:pom (1.0) +10 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.499)

org.jenkins-ci.main:jenkins-core MAVEN version 1.499 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin 1.0 - com.nirima.jenkins.repository:pom 1.0 ...

org.jenkins-ci.main:jenkins-test-harness (1.498), org.jenkins-ci.main:jenkins-war (1.498) +8 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.498)

org.jenkins-ci.main:jenkins-core MAVEN version 1.498 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.498 - org.jenkins-ci.main:jenkins-war 1.498 -...

org.jenkins-ci.main:jenkins-test-harness (1.495), org.jenkins-ci.main:jenkins-war (1.495) +6 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.495)

org.jenkins-ci.main:jenkins-core MAVEN version 1.495 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.495 - org.jenkins-ci.main:jenkins-war 1.495 -...

com.googlecode.refit.jenkins:refit (>=0.1, <=0.3.1), jenkins.plugins.clangscanbuild:clang-scanbuild-plugin (>=1.0, <=1.3.1) +19 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.403)

org.jenkins-ci.main:jenkins-core MAVEN version 1.403 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.googlecode.refit.jenkins:refit =0.1, =1.0, =1.19, =1.3, =2.1, =0.2.4, =0.2.8 -...

com.groupon.jenkins-ci.plugins:dotci (>=2.30.2, <=2.36.2), org.jenkins-ci.main:jenkins-war (1.655) +1 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.655)

org.jenkins-ci.main:jenkins-core MAVEN version 1.655 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =2.30.2, =2.36.2 - org.jenkins-ci.main:jenkins-war 1.655 -...

org.jenkins-ci.tests:plugins-compat-tester-cli (>=1201.vb_4f0b_b_63dd3b, <=1212.vde346b_7a_dc40) potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (2.386)

org.jenkins-ci.main:jenkins-core MAVEN version 2.386 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.tests:plugins-compat-tester-cli =1201.vb4f0bb63dd3b, =1212.vde346b7adc40 Source...

org.jenkins-ci.tests:plugins-compat-tester-cli (>=1201.vb_4f0b_b_63dd3b, <=1212.vde346b_7a_dc40) potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (2.386)

org.jenkins-ci.main:jenkins-core MAVEN version 2.386 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.tests:plugins-compat-tester-cli =1201.vb4f0bb63dd3b, =1212.vde346b7adc40 Source...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

org.jenkins-ci.main:jenkins-war (1.648), org.jenkins-ci.main:test (1.648) +3 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.648)

org.jenkins-ci.main:jenkins-core MAVEN version 1.648 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.648 - org.jenkins-ci.main:test 1.648 -...

org.jenkins-ci.main:jenkins-war (1.649), org.jenkins-ci.main:test (1.649) potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.649)

org.jenkins-ci.main:jenkins-core MAVEN version 1.649 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.649 - org.jenkins-ci.main:test 1.649 Source cves:...

com.openshift.jenkins:openshift-pipeline (>=1.0.14, <=1.0.57), org.jenkins-ci.infra:pipeline-metadata-utils (>=1.0, <=1.2) +6 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.651)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.openshift.jenkins:openshift-pipeline =1.0.14, =1.0, =0.10, =2.0.1, =1.58, =1.63 -...

org.jenkins-ci.main:jenkins-war (1.656), org.jenkins-ci.main:test (1.656) potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.656)

org.jenkins-ci.main:jenkins-core MAVEN version 1.656 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.656 - org.jenkins-ci.main:test 1.656 Source cves:...

org.jenkins-ci.main:jenkins-test-harness (1.643), org.jenkins-ci.main:jenkins-war (1.643) +1 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.643)

org.jenkins-ci.main:jenkins-core MAVEN version 1.643 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.643 - org.jenkins-ci.main:jenkins-war 1.643 -...

org.jenkins-ci.main:jenkins-test-harness (1.639), org.jenkins-ci.main:jenkins-war (1.639) +4 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.639)

org.jenkins-ci.main:jenkins-core MAVEN version 1.639 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.639 - org.jenkins-ci.main:jenkins-war 1.639 -...

com.parallels:parallels-desktop (>=0.4, <=0.6), org.fedoraproject.jenkins.plugins:copr (0.6.1) +7 more potentially affected by CVE-2023-27898 via org.jenkins-ci.main:jenkins-core (1.651.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.parallels:parallels-desktop =0.4, =1.6, =0.7.0, =0.8.1 Source cves: CVE-2023-27898 Source...