Mark Waite 31974d3c1a Update bundled Apache Mina-sshd plugins (#7623)
Embed Apache mina sshd plugins 2.9.2 (common and core)

Update `sshd-common` plugin and `sshd-core` plugin from
2.9.1-44.v476733c11f82 to 2.9.2-50.va_0e1f42659a_a

Changelog

https://github.com/apache/mina-sshd/blob/master/docs/changes/2.9.2.md
links to http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45047
Unsafe deserialization in SimpleGeneratorHostKeyProvider

Jenkins core does not reference the SimpleGeneratorHostKeyProvider class.

It is referenced from sshd plugin at
https://github.com/jenkinsci/sshd-plugin/blob/251d59011530b4d3a4db4a3e6ee8f076c61c3bfe/src/main/java/org/jenkinsci/main/modules/sshd/SSHD.java#L162

Users can upgrade the plugin themselves during installation but it is
easier if we bundle the updated plugin version with new releases rather
than requiring that the user perform the update.
2023-02-06 15:01:17 -07:00
2022-11-12 17:13:51 +01:00
2022-08-25 21:50:53 +01:00
2011-01-31 18:34:17 -08:00
2022-08-25 21:50:13 +01:00
2022-08-25 21:50:53 +01:00
2022-12-08 13:16:20 -08:00
2011-09-11 16:12:09 +02:00

About

Jenkins Regular Release Jenkins LTS Release Docker Pulls CII Best Practices

In a nutshell, Jenkins is the leading open-source automation server. Built with Java, it provides over 1,800 plugins to support automating virtually anything, so that humans can spend their time doing things machines cannot.

What to Use Jenkins for and When to Use It

Use Jenkins to automate your development workflow, so you can focus on work that matters most. Jenkins is commonly used for:

  • Building projects
  • Running tests to detect bugs and other issues as soon as they are introduced
  • Static code analysis
  • Deployment

Execute repetitive tasks, save time, and optimize your development process with Jenkins.

Downloads

The Jenkins project provides official distributions as WAR files, Docker images, native packages and installers for platforms including several Linux distributions and Windows. See the Downloads page for references.

For all distributions Jenkins offers two release lines:

  • Weekly - Frequent releases which include all new features, improvements, and bug fixes.
  • Long-Term Support (LTS) - Older release line which gets periodically updated via bug fix backports.

Latest releases: Jenkins Regular Release Jenkins LTS Release

Source

Our latest and greatest source of Jenkins can be found on GitHub. Fork us!

Contributing to Jenkins

Follow the contributing guidelines if you want to propose a change in the Jenkins core. For more information about participating in the community and contributing to the Jenkins project, see this page.

Documentation for Jenkins core maintainers is in the maintainers guidelines.

News and Website

All information about Jenkins can be found on our website. Follow us on Twitter or LinkedIn.

Governance

See the Jenkins Governance Document for information about the project's open governance, our philosophy and values, and development practices. Jenkins Code of Conduct can be found here.

Adopters

Jenkins is used by millions of users and thousands of companies. See adopters for the list of Jenkins adopters and their success stories.

License

Jenkins is licensed under the MIT License.

Languages
Java 87.1%
HTML 6.5%
JavaScript 3.1%
SCSS 2.2%
Groovy 0.4%
Other 0.6%