CloudBees Jenkins Platform - Operations Center 2.204.3.7 revision 2

RELEASED: 2020-03-09

Based on Jenkins LTS2.204.3-cb-9

Rolling release

Security advisory

CloudBees Security Advisory 2020-03-09

This advisory announces vulnerabilities in Jenkins, CloudBees Jenkins Distribution, CloudBees Jenkins Platform and CloudBees Core.

Plugin modifications

Release Notes

Upgraded Operations Center Cluster Operations Plugin from 2.204.0.6 to 2.204.0.7
Release Notes

Upgraded Operations Center Single Sign-On Plugin from 2.204.0.5 to 2.204.0.6
Release Notes

Upgraded Script Security Plugin from 1.70 to 1.71

Compatible plugins

Jenkins Apache HttpComponents Client 4.x API Plugin

4.5.10-2.0 compatible installed by default
SSH Agent Plugin

1.19 compatible optional
Oracle Java SE Development Kit Installer Plugin

1.4 compatible installed by default
Jenkins Active Directory plugin

2.16 compatible optional
Maven Integration plugin

3.4 compatible optional
CloudBees Flow

1.1.12 compatible optional
Jenkins JSch dependency plugin

0.1.55.1 compatible optional
Durable Task Plugin

1.33 compatible optional
Email Extension Plugin

2.68 compatible optional
Pipeline: API

2.38 compatible installed by default
Support Core Plugin

2.67 compatible installed by default
Google Compute Engine Plugin

4.2.0 compatible optional
Node Iterator API Plugin

1.5.0 compatible installed by default
Google OAuth Credentials plugin

1.0.0 compatible optional
Matrix Authorization Strategy Plugin

2.5 compatible optional
Stack Trace Suppression Plugin

1.5 compatible optional
Pipeline: Step API

2.22 compatible installed by default
Matrix Project Plugin

1.14 compatible optional
Jenkins Health Advisor by CloudBees

3.0.1 compatible optional
CloudBees AWS Credentials Plugin

1.28 compatible optional
OAuth Credentials plugin

0.4 compatible optional
Amazon EC2 plugin

1.49.1 compatible optional
Trilead API Plugin

1.0.5 compatible optional
JAXB plugin

2.3.0.1 compatible installed by default
PAM Authentication plugin

1.6 compatible optional
Command Agent Launcher Plugin

1.4 compatible installed by default
Amazon Web Services SDK

1.11.700 compatible optional
bouncycastle API Plugin

2.18 compatible installed by default
Unique ID Library Plugin

2.2.0 compatible optional
Google Cloud Storage plugin

1.5.1 compatible optional
Google Metadata plugin

0.3.1 compatible optional

Proprietary plugins

Operations Center Notification

1.0 proprietary optional
CloudBees License Manager

9.36 proprietary installed by default
Notification API

1.2 proprietary optional
CloudBees Update Center Plugin

4.46 proprietary optional
CloudBees VMWare Autoscaling Plugin

4.3.8 proprietary optional
CloudBees Monitoring Plugin

2.8 proprietary installed by default
Operations Center Elasticsearch Provider

2.204.0.6 proprietary optional
CloudBees Jenkins Enterprise License Entitlement Check

8.25 proprietary installed by default
CloudBees Backup Plugin

3.38.17 proprietary optional
User Activity Monitoring Plugin

1.1.5 proprietary optional
CloudBees Folders Plus Plugin

3.9 proprietary installed by default
Operations Center Server License Entitlement Check

2.204.0.5 proprietary installed by default
CloudBees Role-Based Access Control Plugin

5.30 proprietary optional
Operations Center Single Sign-On Plugin

2.204.0.6 proprietary optional
Operations Center Server Role Based Access Control

2.204.0.5 proprietary optional
Operations Center Agent

2.204.0.5 proprietary installed by default
Operations Center Analytics Viewer

2.107.1.5 proprietary optional
Operations Center Monitoring Plugin

2.204.0.5 proprietary optional
Operations Center Embedded elasticsearch

2.73.0.1 proprietary optional
CloudBees Administrative Monitors Plugin

1.0.1 proprietary installed by default
CloudBees SSH Build Agents Plugin

2.5 proprietary optional
Operations Center Analytics Reporter

2.107.1.5 proprietary optional
Operations Center Server EC2 Cloud

2.204.0.5 proprietary optional
Beekeeper Upgrade Assistant Plugin

2.138.0.11 proprietary installed by default
Operations Center Analytics Feeder

2.107.1.5 proprietary optional
Operations Center Analytics

2.107.1.5 proprietary optional
CloudBees Plugin Usage Plugin

1.10 proprietary optional
CloudBees Skip Next Build Plugin

4.3 proprietary optional
Operations Center Update Center Plugin

2.204.0.5 proprietary optional
CloudBees Update Center Data API

4.42 proprietary installed by default
CloudBees WikiText Security Plugin

3.9 proprietary optional
Operations Center Context

2.204.0.5 proprietary installed by default
Operations Center JNLP Agent Controller Plugin

2.204.0.5 proprietary optional
CloudBees Restart Aborted Builds Plugin

1.13 proprietary optional
Operations Center Analytics Kibana Dashboards

2.107.1.5 proprietary optional
Operations Center Server Plugin

2.204.0.5 proprietary installed by default
Operations Center Server Cluster Operations

2.204.0.7 proprietary optional
CloudBees Support Plugin

3.22 proprietary installed by default
CloudBees Analytics Plugin

1.9 proprietary installed by default
CloudBees Nodes Plus Plugin

1.19 proprietary optional
Operations Center Analytics Configuration

2.107.1.5 proprietary optional
[CloudBees High Availability Management plugin]

4.20 proprietary installed by default
External Notification Plugin

1.2 proprietary optional
CloudBees Quiet Start Plugin

1.6 proprietary optional

Verified plugins

SSH Credentials Plugin

1.18.1 verified optional
Credentials Binding Plugin

1.20 verified optional
Folders Plugin

6.9 verified installed by default
Display URL API

2.3.1 verified installed by default
MapDB API Plugin

1.0.9.0 verified installed by default
Secure Requester Whitelist Plugin

1.4 verified optional
Jackson 2 API Plugin

2.10.2 verified installed by default
JUnit Plugin

1.28 verified installed by default
SAML Plugin

1.1.4 verified optional
Plain Credentials Plugin

1.5 verified optional
OWASP Markup Formatter Plugin

1.8 verified optional
Metrics Plugin

4.0.2.6 verified installed by default
Config File Provider Plugin

3.6.3 verified optional
Jenkins SSH Slaves plugin

1.31.0 verified optional
Structs Plugin

1.20 verified installed by default
Jenkins Mailer Plugin

1.30 verified installed by default
Variant Plugin

1.3 verified installed by default
SCM API Plugin

2.6.3 verified installed by default
Javadoc Plugin

1.5 verified optional
Async Http Client

1.7.24.3 verified installed by default
Authentication Tokens API Plugin

1.3 verified optional
LDAP Plugin

1.21 verified optional
Script Security Plugin

1.71 verified installed by default
Credentials Plugin

2.3.0 verified installed by default
Token Macro Plugin

2.10 verified installed by default