Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update jenkins-cli.jar to v2.479.3 #321

Merged
merged 1 commit into from
Jan 11, 2025

Conversation

acant
Copy link
Contributor

@acant acant commented Jan 10, 2025

This should address #320 and fix CVE-2015-8103.
I think it might also address CVE-2024-43044.

# Download the current `jenkins.war` file from https://www.jenkins.io/download/ to $DOWNLOAD_DIR
cd $REPO_DIR
mkdir -p tmp/jenkins
mv $DOWNLOAD_DIR/jenkins.war tmp/jenkins
cd tmp/jenkins
jar -xvf jenkins.war
ls WEB-INF/lib/cli-*.jar
# Make note of the cli version number
cp WEB-INF/lib/cli-*.jar ../../java_deps/jenkins-cli.jar
cd ../..
# done! Ready to update the CHANGELOG and commit.

Please let me know if there are any changes that are needed to get this PR merged.

@grosser
Copy link
Collaborator

grosser commented Jan 11, 2025

thx, looks good and sha matches what I got :)

@grosser grosser merged commit f778e41 into arangamani:master Jan 11, 2025
@grosser
Copy link
Collaborator

grosser commented Jan 11, 2025

added your instructions into the readme since that was not obvious at all :D
#322

@grosser
Copy link
Collaborator

grosser commented Jan 11, 2025

2.2.0

@acant
Copy link
Contributor Author

acant commented Jan 12, 2025

Awesome @grosser 👍 , thank you for the merged.
I will try deploying this next week and confirm if it clears both of the CVE reports.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants