Hi, 

The last docker image for 1.651.3 is up in the docker hub.

The official images are now security scanned, and you can see the results 
at https://hub.docker.com/r/library/jenkins/tags/1.651.3/ (need to be 
logged in)

Some layers come from the parent Debian and Java images, but the last ones 
are from Jenkins war, showing several CVEs for Spring (critical), Groovy 
(critical), httpclient, commons-compress, xstream and jbcrypt

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/caf20fac-70d0-4429-8335-ed3366105982%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to