Question
The following vulnerabilities were found in Java:
- CVE-2026-91403
- CVE-2026-114820
How to mitigate them in TeamCity?
Answer
TeamCity bundles Amazon Corretto 64-bit Java 21. 21.0.13.0.11 version of Amazon Corretto addresses this vulnerability. Bundled Java will be updated in installers for future TeamCity releases (2026.2, 2026.1.6), as well as in the Docker images.
Updating TeamCity doesn't update the JRE it uses. The JREs used by TeamCity Server and build agents need to be manually upgraded:
Comments
0 comments
Please sign in to leave a comment.