-
Bug
-
Resolution: Fixed
-
Major
-
None
-
-
2.390 2.387.1
We are getting the following vulnerability report from newly built Jenkins servers using the latest weekly build (2.389) :
CVE-2022-45047 MINA SSHD
We think its related to the following:
/usr/share/java/jenkins.war/WEB-INF/detached-plugins/mina-sshd-api-common.hpi/WEB-INF/lib/sshd-common-2.9.1.jar
{}The vulnerability is fixed in version 2.9.2
Can someone update this plugin within the next weekly build ? as this is blocking us from deploying Jenkins in our environment.
- is related to
-
JENKINS-70571 Update bundled Apache Mina-sshd plugins from 2.9.1 to 2.9.2
- Closed
- links to