Multiple security vulnerabilities in Jenkins 2.393 and earlier, LTS 2.375.3 and earlier

Using Jenkins Ask a question
1

Hi , I am getting the below warning message in my Jenkins home page. Please help to resolve that warnings.

Jenkins 2.375.1 core and libraries
Multiple security vulnerabilities in Jenkins 2.393 and earlier, LTS 2.375.3 and earlier
A fix for this issue is available. Go to the plugin manager to update the plugin.

Screenshot 2023-03-12 122219
Screenshot 2023-03-12 1222191027×303 38.1 KB

2

and? This isn’t a question. It’s just a statement.

2.375.1 is not the latest version of the 2.375 line.

3

You linked the security advisory containing the steps what to do. I recommend taking a look at it.
The security advisory notes how to mitigate the warnings.

4

Gotcha. Need to follow below.

Fix

  • Jenkins weekly should be updated to version 2.394
  • Jenkins LTS should be updated to version 2.375.4 or 2.387.1
  • update-center2 should be updated to version 3.15
5

Btw I dont see the version more than 2.375.3 . Wondering how to upgrade to Jenkins LTS should be updated to version 2.375.4 or 2.387.1 as these are the fixes.

Screenshot 2023-03-12 152812
Screenshot 2023-03-12 1528121041×390 173 KB

6

Once chore(deps): bump lts to 2.387.1 by jenkins-dependency-updater[bot] · Pull Request #812 · jenkinsci/helm-charts · GitHub is merged and released, update the helm repository.

1 Like
7

Thank much. It helped.!!