Can we release a new version of 2.46x that fixes Security-3463 / CVE-2024-47855?

[920526640]

Can we release a new version of 2.46x that fixes Security-3463 / CVE-2024-47855?
Because we’re still using jdk11

[MarkEWaite (Mark Waite)]

@920526640

Can we release a new version of 2.46x that fixes Security-3463 / CVE-2024-47855?

We don’t plan to release a new version of 2.462.x. The Jenkins security team tracks the most recent LTS release and the most recent weekly release.

[bpedersen2 (Björn Pedersen)]

@920526640

Because we’re still using jdk11

And note, the jdk (actually jsu a jre is need) used to run jenkins does not need to be the same that you use to build your projects. So you can run jenkins on jre 17 or jre 21 and still let your builds use a jdk11.