Jenkins Security Advisory 2022-01-12
Jenkins published a security advisory dated 2022-01-12. The source lists Jenkins Core and a set of plugins as affected, including Active Directory, Credentials Binding, HashiCorp Vault, SSH Agent and Publish Over SSH. The text provided does not describe the individual vulnerabilities, their severity, or the fixed versions.
What changes for platform teams
Teams running Jenkins core or any listed plugin should check installed versions against the advisory and apply the fixed releases. The source text here does not give the fixed versions, so the advisory itself is needed to confirm the upgrade path.
Read the original at Jenkins security advisories ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules