Description
Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jenkins project | Jenkins Mailer Plugin | unspecified – ≤ 1.32 | 1.29.1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat OpenShift 4 | jenkins-2-plugins | 4.6.1601368321-1.el8 | RHSA-2020:4297 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.6.0-202010081244.p0.git.3794.4743d24.el7 | RHSA-2020:4297 |
| Red Hat OpenShift 4 | podman +3 | 1.9.3-3.rhaos4.6.el8 | RHSA-2020:4297 |
| Red Hat OpenShift 4 | runc | 1.0.0-81.rhaos4.6.git5b757d4.el7 | RHSA-2020:4297 |
| Red Hat OpenShift 4 | skopeo +2 | 1:1.1.1-2.rhaos4.6.el8 | RHSA-2020:4297 |
| Red Hat OpenShift 3 | jenkins-2-plugins | 3.11.1603460090-1.el7 | RHSA-2020:5102 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jenkins-ci.plugins:mailer | >= 1.32, < 1.32.1 | 1.32.1 | GHSA-6fr3-286q-q3cr |
| Maven | org.jenkins-ci.plugins:mailer | >= 1.30, < 1.31.1 | 1.31.1 | GHSA-6fr3-286q-q3cr |
| Maven | org.jenkins-ci.plugins:mailer | < 1.29.1 | 1.29.1 | GHSA-6fr3-286q-q3cr |
Advisories 2
- RHSA-2020:4297 Red Hat Security Advisory: OpenShift Container Platform 4.6.1 package security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2020:5102 Red Hat Security Advisory: OpenShift Container Platform 3.11.318 jenkins-2-plugins security update Red Hat Security Advisories (RHSA) · Nov 22, 2025