CVE-2025-32755

In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SSH...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...

CVE-2025-32754

In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...

CVE-2025-32755

The jenkins/ssh-slave Docker images based on Debian are vulnerable to an SSH host key reuse issue. This occurs because SSH host keys are generated during image creation, resulting in all containers of the same version sharing identical host keys. This flaw stems from errors in the pseudorandom nu...

CVE-2025-32754

The jenkins/ssh-agent Docker images, version 6.11.1 and earlier , are vulnerable to an SSH host key reuse flaw. For images based on Debian , SSH host keys are generated during image creation, resulting in all containers of the same version sharing identical keys. This allows an attacker to perfor...

Git releases with critical vulnerabilities on Jenkins Docker images

The Jenkins project provides Docker images for both controllers and agents. Most of these Docker images include the git command line tool to interact with Git repositories. Git releases published before 2023-01-17 are affected by the vulnerabilities...