Critical: Red Hat Security Advisory: OpenShift Container Platform 4.10.56 security update

Red Hat OpenShift Container Platform release 4.10.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10. Red Hat Product Security has rated this update as having a...

CVE-2023-27899

A flaw was found in Jenkins. Jenkins creates a temporary file when a plugin is uploaded from an administrator’s computer. If these permissions are overly permissive, they may allow attackers with access to the Jenkins controller file system to read and write the file before it is installed in...

org.jenkins-ci.main:jenkins-test-harness (1.406), org.jenkins-ci.main:jenkins-war (1.406) +7 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.406)

org.jenkins-ci.main:jenkins-core MAVEN version 1.406 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.406 - org.jenkins-ci.main:jenkins-war 1.406 -...

org.jenkins-ci.main:jenkins-test-harness (1.569), org.jenkins-ci.main:jenkins-war (1.569) +1 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.569)

org.jenkins-ci.main:jenkins-core MAVEN version 1.569 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.569 - org.jenkins-ci.main:jenkins-war 1.569 -...

org.jenkins-ci.main:jenkins-test-harness (1.560), org.jenkins-ci.main:jenkins-war (1.560) +6 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.560)

org.jenkins-ci.main:jenkins-core MAVEN version 1.560 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.560 - org.jenkins-ci.main:jenkins-war 1.560 -...

org.jenkins-ci.main:jenkins-test-harness (1.611), org.jenkins-ci.main:jenkins-war (1.611) +3 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.611)

org.jenkins-ci.main:jenkins-core MAVEN version 1.611 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.611 - org.jenkins-ci.main:jenkins-war 1.611 -...

com.nirima.jenkins.repository:jenkins-maven-plugin (>=0.6, <=0.9), com.nirima.jenkins.repository:pom (>=0.6, <=0.9) +12 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.417)

org.jenkins-ci.main:jenkins-core MAVEN version 1.417 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin =0.6, =0.6, =0.6, =1.0, =0.1, =1.1, =0.1.0,...

org.jenkins-ci.main:jenkins-test-harness (1.621), org.jenkins-ci.main:jenkins-war (1.621) +2 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.621)

org.jenkins-ci.main:jenkins-core MAVEN version 1.621 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.621 - org.jenkins-ci.main:jenkins-war 1.621 -...

org.jenkins-ci.main:jenkins-test-harness (1.538), org.jenkins-ci.main:jenkins-war (1.538) +5 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.538)

org.jenkins-ci.main:jenkins-core MAVEN version 1.538 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.538 - org.jenkins-ci.main:jenkins-war 1.538 -...

com.thalesgroup.dtkit:dtkit-default-junit-jenkins (>=0.15, <=0.16), com.thalesgroup.dtkit:dtkit-default-tusar-jenkins (>=0.16, <=0.18) +42 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.396)

org.jenkins-ci.main:jenkins-core MAVEN version 1.396 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-default-junit-jenkins =0.15, =0.16, =0.12, =0.1, =1.0, =1.2 -...

net.praqma:monkit-plugin (>=0.2.5, <=1.0.0), org.jenkins-ci.main:jenkins-test-harness (1.426) +7 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.426)

org.jenkins-ci.main:jenkins-core MAVEN version 1.426 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:monkit-plugin =0.2.5, =0.1, =1.0, =1.3 Source cves: CVE-2023-27899 Source advisory:...

org.jenkins-ci.main:jenkins-test-harness (1.491), org.jenkins-ci.main:jenkins-war (1.491) +6 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.491)

org.jenkins-ci.main:jenkins-core MAVEN version 1.491 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.491 - org.jenkins-ci.main:jenkins-war 1.491 -...

org.jenkins-ci.main:jenkins-test-harness (1.532.2), org.jenkins-ci.main:jenkins-war (1.532.2) +16 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.532.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.532.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.532.2 - org.jenkins-ci.main:jenkins-war 1.532.2 -...

jp.shiftinc.jenkins.plugins:discard-old-build (>=1.04, <=1.05), org.jenkins-ci.main:jenkins-test-harness (1.515) +6 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.515)

org.jenkins-ci.main:jenkins-core MAVEN version 1.515 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jp.shiftinc.jenkins.plugins:discard-old-build =1.04, =1.05 -...

org.jenkins-ci.main:jenkins-test-harness (1.416), org.jenkins-ci.main:jenkins-war (1.416) +2 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.416)

org.jenkins-ci.main:jenkins-core MAVEN version 1.416 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.416 - org.jenkins-ci.main:jenkins-war 1.416 -...

org.jenkins-ci.main:jenkins-war (1.509.3.jenkins-14362-jzlib), org.jenkins-ci.main:maven-plugin (1.509.3.jenkins-14362-jzlib) potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.509.3.jenkins-14362-jzlib)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509.3.jenkins-14362-jzlib is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.509.3.jenkins-14362-jzlib -...

com.thalesgroup.dtkit:dtkit-metrics-hudson-api (>=0.14, <=0.14.1), com.thalesgroup.jenkins-ci.plugins:cppcheck (>=0.11, <=0.14) +29 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.397)

org.jenkins-ci.main:jenkins-core MAVEN version 1.397 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.thalesgroup.dtkit:dtkit-metrics-hudson-api =0.14, =0.11, =1.5, =1.15, =0.3, =0.5.11 -...

org.jenkins-ci.main:jenkins-test-harness (1.498), org.jenkins-ci.main:jenkins-war (1.498) +8 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.498)

org.jenkins-ci.main:jenkins-core MAVEN version 1.498 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.498 - org.jenkins-ci.main:jenkins-war 1.498 -...

com.nirima.jenkins.repository:jenkins-maven-plugin (1.0), com.nirima.jenkins.repository:pom (1.0) +10 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.499)

org.jenkins-ci.main:jenkins-core MAVEN version 1.499 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.nirima.jenkins.repository:jenkins-maven-plugin 1.0 - com.nirima.jenkins.repository:pom 1.0 ...

org.jenkins-ci.main:jenkins-test-harness (1.496), org.jenkins-ci.main:jenkins-war (1.496) +3 more potentially affected by CVE-2023-27899 via org.jenkins-ci.main:jenkins-core (1.496)

org.jenkins-ci.main:jenkins-core MAVEN version 1.496 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.496 - org.jenkins-ci.main:jenkins-war 1.496 -...