Fedora 36 : zziplib (2022-b5d2f7f8f2)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-b5d2f7f8f2 advisory. Automatic update for zziplib-0.13.72-1.fc36. Changelog Wed Feb 9 2022 Alexander Bokovoy - 0.13.72-1 - 0.13.72 - Fixes CVE-2020-18442 - Resolves: rhbz1973831 ...

CVE-2024-41217

A heap-based buffer overflow in tsMuxer version nightly-2024-05-10-02-00-45 allows attackers to cause Denial of Service DoS via a crafted MKV video file...

io.jenkins.plugins:pipeline-agent-build-history (>=4.v3c646062c4f7, <=6.vdb_fa_c0844c1e) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3812.vc3031a_b_a_c955)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3812.vc3031abac955 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

GHSA-MRPR-VR82-X88R Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin

Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main Jenkinsfile script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose Jenkinsfile script is no longer...

io.jenkins.plugins:cdevents (>=1-37.v6412b_91c3799, <=1-40.vb_3d2c94f2379), io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=34.v570d1a_452f30) +4 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1273.v66c1964f0dfd)

org.jenkins-ci.plugins:script-security MAVEN version 1273.v66c1964f0dfd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:cdevents =1-37.v6412b91c3799, =20.v2cb6cc0a7d81,...

io.jenkins.plugins:zohosprints (>=1.0, <=1.1.4), org.jenkins-ci.plugins:build-name-setter (2.0.4) +6 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.54)

org.jenkins-ci.plugins:script-security MAVEN version 1.54 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - io.jenkins.plugins:zohosprints =1.0, =2.4, =2.62.1, =2.2, =1.78, =2.0.0, =1.14,...

io.jenkins.plugins:pipeline-agent-build-history (>=44.va_44d94c22f21, <=64.vd99f169b_5fd0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3894.3896.vca_2c931e7935)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3894.3896.vca2c931e7935 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

io.jenkins.plugins:pipeline-agent-build-history (>=16.vb_528eea_d8d6d, <=18.v66030db_e5f02), net.plavcak.jenkins:scmskip (50.vfb_3a_f04242a_a) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3826.v3b_5707fe44da)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3826.v3b5707fe44da is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

io.jenkins.plugins:pipeline-agent-build-history (34.v570d1a_452f30), io.jenkins.plugins:pipeline-groovy-lib (>=727.ve832a_9244dfa, <=745.vdf6077913de0) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3889.v937e0b_3412d3)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3889.v937e0b3412d3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin

Jenkins Pipeline: Declarative Plugin 2.2214.vbb34b2ea9b83 and earlier does not check whether the main Jenkinsfile script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose Jenkinsfile script is no longer...

io.jenkins.plugins:pipeline-agent-build-history (>=20.v2cb_6cc0a_7d81, <=22.v0372f41a_2ea_9), io.jenkins.plugins:warnings-ng (>=11.1.0, <=11.2.0) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3867.v535458ce43fd)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3867.v535458ce43fd is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

hudson.plugins.octopusdeploy:octopusdeploy (4.0.2), org.jenkins-ci.plugins:badge (>=1.0, <=1.1) +2 more potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.39)

org.jenkins-ci.plugins:script-security MAVEN version 1.39 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - hudson.plugins.octopusdeploy:octopusdeploy 4.0.2 - org.jenkins-ci.plugins:badge =1.0...

io.jenkins.plugins:pipeline-agent-build-history (28.vc1153328e666) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3883.vb_3ff2a_e3eea_f)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3883.vb3ff2ae3eeaf is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

org.jenkins-ci.plugins:embeddable-build-status (>=2.0-beta1, <=2.0.4) potentially affected by CVE-2024-52549 via org.jenkins-ci.plugins:script-security (1.49)

org.jenkins-ci.plugins:script-security MAVEN version 1.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins:embeddable-build-status =2.0-beta1, =2.0.4 Source cves:...

io.jenkins.plugins:pipeline-agent-build-history (74.v0f96046017ef) potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (3922.va_f73b_7c4246b)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 3922.vaf73b7c4246b is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - io.jenkins.plugins:pipeline-agent-build-history...

CVE-2024-52550

Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main Jenkinsfile script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose Jenkinsfile script is no longer approv...

CVE-2024-52551

Jenkins Pipeline: Declarative Plugin 2.2214.vbb34b2ea9b83 and earlier does not check whether the main Jenkinsfile script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose Jenkinsfile script is no longer...

CVE-2024-52551

Jenkins Pipeline: Declarative Plugin 2.2214.vbb34b2ea9b83 and earlier does not check whether the main Jenkinsfile script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose Jenkinsfile script is no longer...

CVE-2024-52551

Jenkins Pipeline: Declarative Plugin 2.2214.vbb34b2ea9b83 and earlier does not check whether the main Jenkinsfile script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose Jenkinsfile script is no longer...

CVE-2024-52551

Jenkins Pipeline: Declarative Plugin 2.2214.vbb34b2ea9b83 and earlier does not check whether the main Jenkinsfile script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose Jenkinsfile script is no longer...