Groups
Groups
Sign in
Groups
Groups
Jenkins Developers
Conversations
About
Send feedback
Help
[ci.jenkins.io] Agent template update
11 views
Skip to first unread message
Damien Duportal
unread,
Oct 21, 2022, 9:41:44 AM
10/21/22
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Jenkins Developers
Hello dear developers,
We just updated the agent templates on
ci.jenkins.io
(Linux VMs, Linux Containers and Windows VMs) to ensure that the 2 `git` CVEs
https://github.com/git/git/security/advisories/GHSA-3wp6-j8xr-qw85
and
https://github.com/git/git/security/advisories/GHSA-rjr6-wcq6-83p6
are fixed in our build environments (more details on
https://github.blog/2022-10-18-git-security-vulnerabilities-announced/
).
It also includes the changes listed in
https://github.com/jenkins-infra/packer-images/releases/tag/0.45.0
. Most notable are:
- Git to 2.38.1 (to fix CVEs)
- JDK11 bumped to 11.0.16.1+1
- JDK17 bumped to 17.0.4.1+1
Please also note that Docker 20.10.20 (
https://docs.docker.com/engine/release-notes/#201020
) is also in the party, as well on all of our machines.
For the Jenkins Infra,
Damien Duportal
Reply all
Reply to author
Forward
0 new messages