Nixpkgs security tracker
Activity log
- Created suggestion
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not …
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing attackers with Overall/Manage permission to instantiate arbitrary types related to configuration, including those intended for configuration only by administrators.
References
-
Jenkins Security Advisory 2026-08-05 vendor-advisory
Affected products
- *
- <2.568.*
Matching in nixpkgs
pkgs.jenkins
Extendable open source continuous integration server
pkgs.jenkins-job-builder
Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git
pkgs.python313Packages.jenkinsapi
Python API for accessing resources on a Jenkins continuous-integration server
pkgs.python314Packages.jenkinsapi
Python API for accessing resources on a Jenkins continuous-integration server
pkgs.python313Packages.python-jenkins
Python bindings for the remote Jenkins API
pkgs.python314Packages.python-jenkins
Python bindings for the remote Jenkins API
pkgs.python313Packages.jenkins-job-builder
Jenkins Job Builder is a system for configuring Jenkins jobs using simple YAML files stored in Git
Package maintainers
-
@earldouglas James Earl Douglas <james@earldouglas.com>
-
@felixsinger Felix Singer <felixsinger@posteo.net>
-
@Bot-wxt1221 Bot-wxt1221 <3264117476@qq.com>
-
@de11n Elliot Cameron <nixpkgs-commits@deshaw.com>
-
@drets Dmytro Rets <dmitryrets@gmail.com>
-
@despsyched Priyanshu Tripathi <priyanshu.tripathi@deshaw.com>
-
@gador Florian Brandes <florian.brandes@posteo.de>