Red Hat Security Advisory: jenkins security update
An updated Jenkins package and image that includes security fixes are now available for Red Hat OpenShift Enterprise 3.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-3727US | medium4.3 | — | ||
The API URL computer/(master)/api/xml in Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users with extended read permission for the master node to obtain sen… | ||||
| CVE-2016-3726US | high7.4 | — | ||
Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via… | ||||
| CVE-2016-3725US | medium4.3 | — | ||
Jenkins before 2.3 and LTS before 1.651.2 allows remote authenticated users to trigger updating of update site metadata by leveraging a missing permissions check. NOTE: this issue… | ||||
| CVE-2016-3724US | medium6.5 | — | ||
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration. | ||||
| CVE-2016-3723US | medium4.3 | — | ||
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions ch… | ||||
| CVE-2016-3722US | medium4.3OT elevated | — | ||
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing the "full name." | ||||
| CVE-2016-3721US | medium6.5 | — | ||
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables. | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2016:1206self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 1333133external
- 1335415external
- 1335416external
- 1335417external
- 1335418external
- 1335420external
remediations (56)
- Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.noarch as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-0:1.651.2-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.src as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Container Platform 3.2
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206 - Fixedjenkins-plugin-openshift-pipeline-0:1.0.12-1.el7.x86_64 as a component of Red Hat OpenShift Enterprise 3.1
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2016:1206
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan