Jenkins management console warnings

[doublej472]

When I log into the jenkins interface on my TK instance, I'm getting all sorts of warnings in the management interface. I'm not sure which are relevant for production, so I'll dump everything I see:

• It appears that your reverse proxy set up is broken.

• New version of Jenkins (2.107.2) is available for download (changelog).

• Warnings have been published for the following currently installed components:

  • Jenkins 2.89.4 core and libraries:
    • Multiple security vulnerabilities in Jenkins 2.115 and earlier, and LTS 2.107.1 and earlier
  • Mailer Plugin 1.20:
    • Unauthorized users able to send test emails
  • Git plugin 3.5.1:
    • Users without Overall/Read are able to access lists of user names and node names

• This Jenkins instance uses deprecated protocols: CLI-connect,CLI2-connect,JNLP-connect,JNLP2-connect. It may impact stability of the instance. If newer protocol versions are supported by all system components (agents, CLI and other clients), it is highly recommended to disable the deprecated protocols.

• Allowing Jenkins CLI to work in -remoting mode is considered dangerous and usually unnecessary. You are advised to disable this mode. Please refer to the CLI documentation for details. (probably not relevant)

• Agent to master security subsystem is currently off. Please read the documentation and consider turning it on. (probably not relevant)