# Multiple security vulnerabilities in Jenkins 2.393 and earlier, LTS 2.375.3 and earlier

**URL:** <https://community.jenkins.io/t/multiple-security-vulnerabilities-in-jenkins-2-393-and-earlier-lts-2-375-3-and-earlier/6217>\
**Category:** Ask a question\
**Tags:** question\
**Created:** [March 12, 2023, 6:52am UTC](https://community.jenkins.io/t/multiple-security-vulnerabilities-in-jenkins-2-393-and-earlier-lts-2-375-3-and-earlier/6217 "2023-03-12T06:52:43Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Maheshrvm](https://avatars.discourse-cdn.com/v4/letter/m/8edcca/32.png) [@Maheshrvm](https://community.jenkins.io/u/Maheshrvm)\
**Post date:** [March 12, 2023, 6:52am UTC](https://community.jenkins.io/t/multiple-security-vulnerabilities-in-jenkins-2-393-and-earlier-lts-2-375-3-and-earlier/6217/1 "2023-03-12T06:52:43Z")

</div>

Hi , I am getting the below warning message in my Jenkins home page. Please help to resolve that warnings.

Jenkins 2.375.1 core and libraries  
[Multiple security vulnerabilities in Jenkins 2.393 and earlier, LTS 2.375.3 and earlier](https://www.jenkins.io/security/advisory/2023-03-08/)  
A fix for this issue is available. Go to the [plugin manager](https://jenkins.hclpnpsofy.com/pluginManager) to update the plugin.

 ![Screenshot 2023-03-12 122219](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/c/ca8afb74f171b6267d51992e61eba1943406255c.jpeg)

---

<div class="post-metadata">

**Author:** ![halkeye](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/halkeye/32/8_2.png) [@halkeye](https://community.jenkins.io/u/halkeye)\
**Post date:** [March 12, 2023, 7:05am UTC](https://community.jenkins.io/t/multiple-security-vulnerabilities-in-jenkins-2-393-and-earlier-lts-2-375-3-and-earlier/6217/2 "2023-03-12T07:05:39Z")

</div>

and? This isn’t a question. It’s just a statement.

2.375.1 is not the latest version of the 2.375 line.

---

<div class="post-metadata">

**Author:** ![NotMyFault](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/notmyfault/32/466_2.png) [@NotMyFault](https://community.jenkins.io/u/NotMyFault)\
**Post date:** [March 12, 2023, 9:18am UTC](https://community.jenkins.io/t/multiple-security-vulnerabilities-in-jenkins-2-393-and-earlier-lts-2-375-3-and-earlier/6217/3 "2023-03-12T09:18:32Z")

</div>

> [@Maheshrvm](#):
>
> Multiple security vulnerabilities in Jenkins 2.393 and earlier, LTS 2.375.3 and earlier

You linked the security advisory containing the steps what to do. I recommend taking a look at it.  
The security advisory notes how to mitigate the warnings.

---

<div class="post-metadata">

**Author:** ![Maheshrvm](https://avatars.discourse-cdn.com/v4/letter/m/8edcca/32.png) [@Maheshrvm](https://community.jenkins.io/u/Maheshrvm)\
**Post date:** [March 12, 2023, 9:29am UTC](https://community.jenkins.io/t/multiple-security-vulnerabilities-in-jenkins-2-393-and-earlier-lts-2-375-3-and-earlier/6217/4 "2023-03-12T09:29:43Z")

</div>

Gotcha. Need to follow below.

## Fix

- Jenkins weekly should be updated to version 2.394
- Jenkins LTS should be updated to version 2.375.4 or 2.387.1
- **update-center2** should be updated to version 3.15

---

<div class="post-metadata">

**Author:** ![Maheshrvm](https://avatars.discourse-cdn.com/v4/letter/m/8edcca/32.png) [@Maheshrvm](https://community.jenkins.io/u/Maheshrvm)\
**Post date:** [March 12, 2023, 9:59am UTC](https://community.jenkins.io/t/multiple-security-vulnerabilities-in-jenkins-2-393-and-earlier-lts-2-375-3-and-earlier/6217/5 "2023-03-12T09:59:05Z")

</div>

Btw I dont see the version more than 2.375.3 . Wondering how to upgrade to Jenkins LTS should be updated to version 2.375.4 or 2.387.1 as these are the fixes.

 ![Screenshot 2023-03-12 152812](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/3/37e94a18f89e25e6166f95cfe58b5ca2ba6c6cb2.jpeg)

---

<div class="post-metadata">

**Author:** ![NotMyFault](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/notmyfault/32/466_2.png) [@NotMyFault](https://community.jenkins.io/u/NotMyFault)\
**Post date:** [March 12, 2023, 10:44am UTC](https://community.jenkins.io/t/multiple-security-vulnerabilities-in-jenkins-2-393-and-earlier-lts-2-375-3-and-earlier/6217/6 "2023-03-12T10:44:52Z")

</div>

Once [chore(deps): bump lts to 2.387.1 by jenkins-dependency-updater[bot] · Pull Request #812 · jenkinsci/helm-charts · GitHub](https://github.com/jenkinsci/helm-charts/pull/812) is merged and released, update the helm repository.

---

<div class="post-metadata">

**Author:** ![Maheshrvm](https://avatars.discourse-cdn.com/v4/letter/m/8edcca/32.png) [@Maheshrvm](https://community.jenkins.io/u/Maheshrvm)\
**Post date:** [March 12, 2023, 11:23am UTC](https://community.jenkins.io/t/multiple-security-vulnerabilities-in-jenkins-2-393-and-earlier-lts-2-375-3-and-earlier/6217/7 "2023-03-12T11:23:13Z")

</div>

Thank much. It helped.!!
