Important: Red Hat Security Advisory: OpenShift Container Platform 4.7.43 security update

Red Hat OpenShift Container Platform release 4.7.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.7. Red Hat Product Security has rated this update as having a...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), cprice404:pipeline-classpath (0.1.0) +7 more potentially affected by CVE-2022-25173 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.22, =1.15, =1.15, =1.1, =1.0....

com.testinium.jenkins:testinium (1.0), io.fabric8.jenkins.plugins:openshift-sync (>=0.9.1, <=1.0.45) +33 more potentially affected by CVE-2022-25179 via org.jenkins-ci.plugins.workflow:workflow-multibranch (>=2.0, <=2.20)

org.jenkins-ci.plugins.workflow:workflow-multibranch MAVEN version =2.0, =0.9.1, =1.0-alpha-1, =1.0-alpha-1, =1.0-alpha-1, =1.0.0-b15, =1.0.0-b15, =1.0-alpha-8, =1.0-alpha-4, =0.1-preview-1, =1.1.0-beta-4, =1.0-alpha-1, =2.2.0, =2.0, =2.0, =2.6 and more Source cves: CVE-2022-25179 Source advisory...

CVE-2022-25178

Jenkins Pipeline: Shared Groovy Libraries Plugin 552.vd9cc05b8a2e1 and earlier does not restrict the names of resources passed to the libraryResource step, allowing attackers able to configure Pipelines permission to read arbitrary files on the Jenkins controller file system...

com.piketec.jenkins.plugins:piketec-tpt (6.3), org.datadog.jenkins.plugins:datadog (>=1.1.2, <=1.2.0) +4 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.632)

org.jenkins-ci.main:jenkins-core MAVEN version 1.632 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.piketec.jenkins.plugins:piketec-tpt 6.3 - org.datadog.jenkins.plugins:datadog =1.1.2, =1.0,...

io.jenkins.plugins:aws-lambda-cloud (>=0.3, <=0.4), org.jenkins-ci.main:jenkins-test-harness (1.635) +2 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.635)

org.jenkins-ci.main:jenkins-core MAVEN version 1.635 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.jenkins.plugins:aws-lambda-cloud =0.3, =0.4 - org.jenkins-ci.main:jenkins-test-harness 1.635...

com.aliyun.www:aliyun-container-service-deploy (>=0.1.0, <=0.1.1), io.fabric8.jenkins.plugins:openshift-sync (>=y, <=1.0.45) +15 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.651.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.651.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aliyun.www:aliyun-container-service-deploy =0.1.0, =y, =1.0.4, =1.004, =1.0, =1.0.6,...

org.jenkins-ci.main:jenkins-test-harness (1.453), org.jenkins-ci.main:jenkins-war (1.453) +3 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.453)

org.jenkins-ci.main:jenkins-core MAVEN version 1.453 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.453 - org.jenkins-ci.main:jenkins-war 1.453 -...

org.jenkins-ci.main:jenkins-test-harness (1.552), org.jenkins-ci.main:jenkins-war (1.552) +1 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.552)

org.jenkins-ci.main:jenkins-core MAVEN version 1.552 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.552 - org.jenkins-ci.main:jenkins-war 1.552 -...

org.jenkins-ci.main:jenkins-test-harness (1.643), org.jenkins-ci.main:jenkins-war (1.643) +1 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.643)

org.jenkins-ci.main:jenkins-core MAVEN version 1.643 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.643 - org.jenkins-ci.main:jenkins-war 1.643 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

com.apica:apicaloadtest (>=1.1, <=1.10), com.infullmobile.jenkins.plugin:restricted-register (0.1.7) +4 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.610)

org.jenkins-ci.main:jenkins-core MAVEN version 1.610 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.apica:apicaloadtest =1.1, =1.4, =1.7.2 - org.jenkins-ci.plugins:plugin 1.610 Source cves:...

com.tikalk.hudson.plugins:notification (1.10), org.jenkins-ci.main:jenkins-test-harness (1.605) +5 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.605)

org.jenkins-ci.main:jenkins-core MAVEN version 1.605 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification 1.10 - org.jenkins-ci.main:jenkins-test-harness 1.605 -...

org.jenkins-ci.main:jenkins-test-harness (1.634), org.jenkins-ci.main:jenkins-war (1.634) +1 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.634)

org.jenkins-ci.main:jenkins-core MAVEN version 1.634 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.634 - org.jenkins-ci.main:jenkins-war 1.634 -...

com.viltgroup.xcp.jenkins:xcp-ci (>=0.4.0, <=0.5.5), org.jenkins-ci.main:jenkins-test-harness (1.617) +2 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.617)

org.jenkins-ci.main:jenkins-core MAVEN version 1.617 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.viltgroup.xcp.jenkins:xcp-ci =0.4.0, =0.5.5 - org.jenkins-ci.main:jenkins-test-harness 1.61...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

org.jenkins-ci.main:jenkins-test-harness (1.494), org.jenkins-ci.main:jenkins-war (1.494) +9 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.494)

org.jenkins-ci.main:jenkins-core MAVEN version 1.494 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.494 - org.jenkins-ci.main:jenkins-war 1.494 -...

org.jenkins-ci.main:jenkins-test-harness (1.537), org.jenkins-ci.main:jenkins-war (1.537) +2 more potentially affected by CVE-2022-0538 via org.jenkins-ci.main:jenkins-core (1.537)

org.jenkins-ci.main:jenkins-core MAVEN version 1.537 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.537 - org.jenkins-ci.main:jenkins-war 1.537 -...

org.jenkins-ci.main:jenkins-test-harness (1.508), org.jenkins-ci.main:jenkins-war (1.508) +3 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.508)

org.jenkins-ci.main:jenkins-core MAVEN version 1.508 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.508 - org.jenkins-ci.main:jenkins-war 1.508 -...

org.jenkins-ci.main:jenkins-test-harness (1.569), org.jenkins-ci.main:jenkins-war (1.569) +1 more potentially affected by CVE-2022-20612 via org.jenkins-ci.main:jenkins-core (1.569)

org.jenkins-ci.main:jenkins-core MAVEN version 1.569 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.569 - org.jenkins-ci.main:jenkins-war 1.569 -...