Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 Openshift Jenkins security update

An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.13. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update

An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.12. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 Openshift Jenkins security update

An update for Openshift Jenkins is now available for Red Hat Product OCP Tools 4.15. Red Hat Product Security has rated this update as having a security impact of important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 : Red Hat Product OCP Tools 4.13 Openshift Jenkins (RHSA-2024:8887)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8887 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

RHEL 8 : Red Hat Product OCP Tools 4.14 Openshift Jenkins (RHSA-2024:8885)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8885 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

Jenkins LTS < 2.462.3 / Jenkins weekly < 2.479 Multiple Vulnerabilities

According to its its self-reported version number, the version of Jenkins running on the remote web server is Jenkins LTS prior to 2.462.3 or Jenkins weekly prior to 2.479. It is, therefore, affected by multiple vulnerabilities: - Jenkins 2.478 and earlier, LTS 2.462.2 and earlier does not redact...

com.cloudbees.plugins:build-flow-plugin (0.18), com.companyline.hall.jenkins:hall-jenkins (>=1.0, <=1.2) +35 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.509.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.plugins:build-flow-plugin 0.18 - com.companyline.hall.jenkins:hall-jenkins =1.0...

jenkins.plugin.assembla:assembla-jenkins (1.0), org.jenkins-ci.main:jenkins-test-harness (1.427) +24 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.427)

org.jenkins-ci.main:jenkins-core MAVEN version 1.427 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jenkins.plugin.assembla:assembla-jenkins 1.0 - org.jenkins-ci.main:jenkins-test-harness 1.427 -...

com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin (1.0.0), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (0.19) +14 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.404)

org.jenkins-ci.main:jenkins-core MAVEN version 1.404 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonyericsson.hudson.plugins.multi-slave-config-plugin:multi-slave-config-plugin 1.0.0 -...

org.jenkins-ci.main:jenkins-test-harness (1.466.2), org.jenkins-ci.main:jenkins-war (1.466.2) +2 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.466.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.466.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.466.2 - org.jenkins-ci.main:jenkins-war 1.466.2 -...

org.jenkins-ci.main:jenkins-war (1.645), org.jenkins-ci.main:test (1.645) +5 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.645)

org.jenkins-ci.main:jenkins-core MAVEN version 1.645 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.645 - org.jenkins-ci.main:test 1.645 -...

org.jenkins-ci.main:jenkins-test-harness (1.460), org.jenkins-ci.main:jenkins-war (1.460) +10 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.460)

org.jenkins-ci.main:jenkins-core MAVEN version 1.460 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.460 - org.jenkins-ci.main:jenkins-war 1.460 -...

org.jenkins-ci.main:jenkins-war (1.509.2.jenkins-14362-jzlib), org.jenkins-ci.main:maven-plugin (1.509.2.jenkins-14362-jzlib) potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.509.2.jenkins-14362-jzlib)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.2.jenkins-14362-jzlib is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.509.2.jenkins-14362-jzlib -...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.17, <=0.19), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.20, <=0.22) +9 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.411)

org.jenkins-ci.main:jenkins-core MAVEN version 1.411 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.17, =0.20, =1.7, =1.17, =1.18 -...

com.cloudbees.jenkins.plugins:additional-identities-plugin (1.1), com.suryagaddipati.jenkins:slave-utilization-plugin (>=1.1, <=1.8) +8 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.488)

org.jenkins-ci.main:jenkins-core MAVEN version 1.488 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:additional-identities-plugin 1.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.510), org.jenkins-ci.main:jenkins-war (1.510) +4 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.510)

org.jenkins-ci.main:jenkins-core MAVEN version 1.510 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.510 - org.jenkins-ci.main:jenkins-war 1.510 -...

org.jenkins-ci.main:jenkins-test-harness (1.558), org.jenkins-ci.main:jenkins-war (1.558) +1 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.558)

org.jenkins-ci.main:jenkins-core MAVEN version 1.558 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.558 - org.jenkins-ci.main:jenkins-war 1.558 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (0.0.4), biz.neustar.jenkins.plugins:packer (1.5) +341 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.625.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin 0.0.4 -...

org.jenkins-ci.main:jenkins-test-harness (1.585), org.jenkins-ci.main:jenkins-war (1.585) +3 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.585)

org.jenkins-ci.main:jenkins-core MAVEN version 1.585 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.585 - org.jenkins-ci.main:jenkins-war 1.585 -...

biz.neustar.jenkins.plugins:packer (>=1.3, <=1.4), com.amazonaws:codedeploy (1.12) +30 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.554.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.554.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - biz.neustar.jenkins.plugins:packer =1.3, =1.12.0-alpha-1, =1.46, =4.7, =1.0.0, =2.9.9, =1.10,...