-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
Jenkins 2.387.1
Hello,
We're starting to get the following Telegram error on every build after Jenkins update to the latest version.
Console output:
ERROR: Step 'Telegram Notification' aborted due to exception:
java.lang.ClassNotFoundException: org.apache.commons.httpclient.HttpMethod
at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:476)
at jenkins.util.URLClassLoader2.findClass(URLClassLoader2.java:35)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:589)
at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:522)
Caused: java.lang.NoClassDefFoundError: org/apache/commons/httpclient/HttpMethod
at tools.devnull.jenkins.plugins.buildnotifications.TelegramNotifier.createMessage(TelegramNotifier.java:64)
at tools.devnull.jenkins.plugins.buildnotifications.BaseNotifier.perform(BaseNotifier.java:168)
at hudson.tasks.BuildStepMonitor$3.perform(BuildStepMonitor.java:47)
at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:818)
at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:767)
at hudson.model.Build$BuildExecution.post2(Build.java:179)
at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:711)
at hudson.model.Run.execute(Run.java:1925)
at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:44)
at hudson.model.ResourceController.execute(ResourceController.java:101)
at hudson.model.Executor.run(Executor.java:442)
Finished: FAILURE
Could someone please take a look and advice? Thank you in advance!
Thanks for the report.
The build-notifications plugin is one of the plugins listed in the sheet that identifies plugins that refer to the outdated HttpClient 3 library that had been previously included in Jenkins core. The outdated HttpClient 3 library has been removed from Jenkins core.
The build-notifications plugin has an unresolved security vulnerability that includes plain text storage and plain text transmission of the Telegram credentials. It was last released 6 years ago.
If the build notifications plugin is important to your organization, please ask your organization to assign someone a day or two a month to adopt the plugin, fix the unresolved security vulnerability, modernize the plugin, and release a new version.