Nixpkgs security tracker
Activity log
- Created suggestion
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity …
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names inconsistently, allowing attackers able to create new users or groups with names that case-insensitively match other characters to impersonate other users or be granted their permissions in some circumstances.
References
-
Jenkins Security Advisory 2026-08-05 vendor-advisory
Affected products
- *
- <2.568.*
Matching in nixpkgs
pkgs.jenkins
Extendable open source continuous integration server
pkgs.jenkins-job-builder
Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git
pkgs.python313Packages.jenkinsapi
Python API for accessing resources on a Jenkins continuous-integration server
pkgs.python314Packages.jenkinsapi
Python API for accessing resources on a Jenkins continuous-integration server
pkgs.python313Packages.python-jenkins
Python bindings for the remote Jenkins API
pkgs.python314Packages.python-jenkins
Python bindings for the remote Jenkins API
pkgs.python313Packages.jenkins-job-builder
Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git
Package maintainers
-
@earldouglas James Earl Douglas <james@earldouglas.com>
-
@felixsinger Felix Singer <felixsinger@posteo.net>
-
@Bot-wxt1221 Bot-wxt1221 <3264117476@qq.com>
-
@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
-
@drets Dmytro Rets <dmitryrets@gmail.com>
-
@despsyched Priyanshu Tripathi <priyanshu.tripathi@deshaw.com>
-
@gador Florian Brandes <florian.brandes@posteo.de>