Important: Red Hat Security Advisory: jenkins and jenkins-2-plugins security update

An update for jenkins and jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.13. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0.3, <=1.0.6), org.jenkins-ci.main:jenkins-test-harness (1.464) +6 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.464)

org.jenkins-ci.main:jenkins-core MAVEN version 1.464 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0.3, =0.11, =0.12 -...

com.googlecode.refit.jenkins:refit (>=0.1, <=0.3.1), jenkins.plugins.clangscanbuild:clang-scanbuild-plugin (>=1.0, <=1.3.1) +19 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.403)

org.jenkins-ci.main:jenkins-core MAVEN version 1.403 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.googlecode.refit.jenkins:refit =0.1, =1.0, =1.19, =1.3, =2.1, =0.2.4, =0.2.8 -...

com.zenika.jenkins-ci.plugins:gradle (1.12), org.jenkins-ci.main:jenkins-test-harness (1.409) +70 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.409)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.zenika.jenkins-ci.plugins:gradle 1.12 - org.jenkins-ci.main:jenkins-test-harness 1.409 -...

org.jenkins-ci.main:jenkins-test-harness (1.409.1), org.jenkins-ci.main:jenkins-war (1.409.1) +2 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.409.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.409.1 - org.jenkins-ci.main:jenkins-war 1.409.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.408), org.jenkins-ci.main:jenkins-war (1.408) +11 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.408)

org.jenkins-ci.main:jenkins-core MAVEN version 1.408 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.408 - org.jenkins-ci.main:jenkins-war 1.408 -...

com.thalesgroup.jenkins-ci.plugins:scons (0.4), net.praqma:matrix-reloaded (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.413)

org.jenkins-ci.main:jenkins-core MAVEN version 1.413 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:scons 0.4 - net.praqma:matrix-reloaded =1.0.0, =1.17, =0.5,...

org.jenkins-ci.main:jenkins-test-harness (1.412), org.jenkins-ci.main:jenkins-war (1.412) +5 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.412)

org.jenkins-ci.main:jenkins-core MAVEN version 1.412 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.412 - org.jenkins-ci.main:jenkins-war 1.412 -...

com.cloudbees.jenkins.plugins:custom-tools-plugin (0.1), com.cwctravel:script-scm (1.3) +90 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.399)

org.jenkins-ci.main:jenkins-core MAVEN version 1.399 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:custom-tools-plugin 0.1 - com.cwctravel:script-scm 1.3 -...

com.coravy.hudson.plugins.github:github (>=0.5, <=0.8), com.sonyericsson.hudson.plugins.gerrit:build-config (>=1.2.2, <=1.2.9) +34 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.400)

org.jenkins-ci.main:jenkins-core MAVEN version 1.400 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.coravy.hudson.plugins.github:github =0.5, =1.2.2, =1.2.2, =2.3.0, =1.4, =1.8, =1.10, =0.1.2...

com.thalesgroup.jenkins-ci.plugins:cppcheck (0.15), com.thalesgroup.jenkins-ci.plugins:xunit (1.16) +46 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.398)

org.jenkins-ci.main:jenkins-core MAVEN version 1.398 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.jenkins-ci.plugins:cppcheck 0.15 - com.thalesgroup.jenkins-ci.plugins:xunit 1.1...

org.jenkins-ci.main:jenkins-test-harness (1.424.4), org.jenkins-ci.main:jenkins-war (1.424.4) +3 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.424.4)

org.jenkins-ci.main:jenkins-core MAVEN version 1.424.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.424.4 - org.jenkins-ci.main:jenkins-war 1.424.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.429), org.jenkins-ci.main:jenkins-war (1.429) +8 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.429)

org.jenkins-ci.main:jenkins-core MAVEN version 1.429 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.429 - org.jenkins-ci.main:jenkins-war 1.429 -...

org.jenkins-ci.main:jenkins-test-harness (1.444), org.jenkins-ci.main:jenkins-war (1.444) +10 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.444)

org.jenkins-ci.main:jenkins-core MAVEN version 1.444 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.444 - org.jenkins-ci.main:jenkins-war 1.444 -...

org.jenkins-ci.main:jenkins-test-harness (1.439), org.jenkins-ci.main:jenkins-war (1.439) +6 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.439)

org.jenkins-ci.main:jenkins-core MAVEN version 1.439 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.439 - org.jenkins-ci.main:jenkins-war 1.439 -...

jenkins.plugin.assembla:assembla-jenkins (1.0), org.jenkins-ci.main:jenkins-test-harness (1.427) +24 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.427)

org.jenkins-ci.main:jenkins-core MAVEN version 1.427 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jenkins.plugin.assembla:assembla-jenkins 1.0 - org.jenkins-ci.main:jenkins-test-harness 1.427 -...

net.praqma:monkit-plugin (>=0.2.5, <=1.0.0), org.jenkins-ci.main:jenkins-test-harness (1.426) +7 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.426)

org.jenkins-ci.main:jenkins-core MAVEN version 1.426 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:monkit-plugin =0.2.5, =0.1, =1.0, =1.3 Source cves: CVE-2023-27902 Source advisory:...

org.jenkins-ci.main:jenkins-test-harness (1.449), org.jenkins-ci.main:jenkins-war (1.449) +4 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.449)

org.jenkins-ci.main:jenkins-core MAVEN version 1.449 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.449 - org.jenkins-ci.main:jenkins-war 1.449 -...

com.deepshiftlabs.nerrvana:nerrvana-plugin (>=1.02.03, <=1.02.05), net.praqma:drmemory-plugin (>=0.1.0, <=0.1.1) +11 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.450)

org.jenkins-ci.main:jenkins-core MAVEN version 1.450 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.deepshiftlabs.nerrvana:nerrvana-plugin =1.02.03, =0.1.0, =1.0, =0.3, =1.02r, =1.10, =1.3,...

org.jenkins-ci.main:jenkins-test-harness (1.461), org.jenkins-ci.main:jenkins-war (1.461) +8 more potentially affected by CVE-2023-27902 via org.jenkins-ci.main:jenkins-core (1.461)

org.jenkins-ci.main:jenkins-core MAVEN version 1.461 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.461 - org.jenkins-ci.main:jenkins-war 1.461 -...