Security updates for Jenkins core and plugins

Daniel Beck May 9, 2018

We just released security updates to Jenkins, versions 2.121 and 2.107.3, that fix multiple security vulnerabilities.

Additionally, we announce previously published security issues and corresponding fixes in these plugins:

Black Duck Hub
Groovy Postbuild
Gitlab Hook (fix unreleased)

For an overview of what was fixed, see the security advisory. For an overview on the possible impact of these changes on upgrading Jenkins LTS, see our LTS upgrade guide.

Subscribe to the jenkinsci-advisories mailing list to receive important notifications related to Jenkins security.

core
plugins
security

About the author

Daniel Beck

Daniel is a Jenkins core maintainer and member of the Jenkins security team. He was the inaugural Jenkins security officer from 2015 to 2021. He sometimes contributes to developer documentation and project infrastructure in his spare time.