Jenkins jenkins/ssh-agent / jenkins/ssh-slave: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 2

• Critical 9.1
  CVE-2025-32754

  In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based o…

  Jenkins Project Jenkins jenkins/ssh-agent Docker images Web / CMS
  Apr 10, 2025
• Critical 9.1
  CVE-2025-32755

  In jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on D…

  Jenkins Project Jenkins jenkins/ssh-slave Docker images Web / CMS
  Apr 10, 2025

Revision history

1. 2025-04-09 #1

   Initiale Fassung

References

• Jenkins Security Advisory vom 2025-04-09
  https://www.jenkins.io/security/advisory/2025-04-10/