Jenkins Security Advisory 2020-11-04
Jenkins published a security advisory dated 2020-11-04 covering 14 plugins, including Active Directory, Kubernetes, Mercurial, Subversion and Azure Key Vault. The source text lists the affected plugins but does not describe the vulnerabilities, their severity or the fixed versions.
What changes for platform teams
Teams running Jenkins should check whether any of the listed plugins are installed and follow the advisory to update them. The source text does not give the fixed versions or severity, so consult the full advisory before judging urgency.
Read the original at Jenkins security advisories ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules