CriticalFix available
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
Type: advisorySources: OSV
- Products
- jenkins, jenkins-2-plugins
- Affected versions
- Not specified
- Fixed versions
- 0:2.387.1.1683009763-3.el8, 0:4.11.1683009941-1.el8
- CVEs
- CVE-2021-26291, CVE-2022-1471, CVE-2022-25857, CVE-2022-29599, CVE-2022-30953, CVE-2022-30954, CVE-2022-42889, CVE-2022-43401, CVE-2022-43402, CVE-2022-43403, CVE-2022-43404, CVE-2022-43405, CVE-2022-43406, CVE-2022-43407, CVE-2022-43408, CVE-2022-43409, CVE-2022-45047, CVE-2023-24422, CVE-2023-25761, CVE-2023-25762, CVE-2023-27903, CVE-2023-27904
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 09:04 UTC · Revision 1
Source evidence
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
core-osv · Original sourcePublished 30 Sept 2024, 16:32 UTC
Red Hat Security Advisory: jenkins and jenkins-2-plugins security update
osv:RHSA-2023:3198
jenkins-2-plugins
Fixed versions: 0:4.11.1683009941-1.el8
jenkins
Fixed versions: 0:2.387.1.1683009763-3.el8
Complete source record
{
"id": "2a3779e53f1c004a9fb085422c6386a492f990003c5e9e2666a76ce8c0df3e4d",
"url": "https://osv.dev/vulnerability/RHSA-2023%3A3198",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: jenkins and jenkins-2-plugins security update",
"summary": "Red Hat Security Advisory: jenkins and jenkins-2-plugins security update",
"evidence": "osv:RHSA-2023:3198",
"products": [
{
"name": {
"value": "jenkins-2-plugins",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.11.1683009941-1.el8",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "jenkins",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.387.1.1683009763-3.el8",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "critical",
"structured": {
"id": "RHSA-2023:3198",
"aliases": [
"RHSA-2023:3198"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.11.1683009941-1.el8"
}
]
}
],
"package": {
"name": "jenkins-2-plugins",
"purl": "pkg:rpm/redhat/jenkins-2-plugins",
"ecosystem": "Red Hat:ocp_tools:4.11::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2023:3198.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.387.1.1683009763-3.el8"
}
]
}
],
"package": {
"name": "jenkins",
"purl": "pkg:rpm/redhat/jenkins",
"ecosystem": "Red Hat:ocp_tools:4.11::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2023:3198.json"
}
}
],
"modified": "2026-10-08T10:03:38Z",
"provider": "osv",
"upstream": [
"CVE-2021-26291",
"CVE-2022-1471",
"CVE-2022-25857",
"CVE-2022-29599",
"CVE-2022-30953",
"CVE-2022-30954",
"CVE-2022-42889",
"CVE-2022-43401",
"CVE-2022-43402",
"CVE-2022-43403",
"CVE-2022-43404",
"CVE-2022-43405",
"CVE-2022-43406",
"CVE-2022-43407",
"CVE-2022-43408",
"CVE-2022-43409",
"CVE-2022-45047",
"CVE-2023-24422",
"CVE-2023-25761",
"CVE-2023-25762",
"CVE-2023-27903",
"CVE-2023-27904"
],
"references": [
"https://access.redhat.com/errata/RHSA-2023:3198",
"https://access.redhat.com/security/updates/classification/#critical",
"https://docs.openshift.com/container-platform/4.11/cicd/jenkins/important-changes-to-openshift-jenkins-images.html",
"https://bugzilla.redhat.com/show_bug.cgi?id=1955739",
"https://bugzilla.redhat.com/show_bug.cgi?id=2066479",
"https://bugzilla.redhat.com/show_bug.cgi?id=2119646",
"https://bugzilla.redhat.com/show_bug.cgi?id=2119647",
"https://bugzilla.redhat.com/show_bug.cgi?id=2126789",
"https://bugzilla.redhat.com/show_bug.cgi?id=2135435",
"https://bugzilla.redhat.com/show_bug.cgi?id=2136370",
"https://bugzilla.redhat.com/show_bug.cgi?id=2136374",
"https://bugzilla.redhat.com/show_bug.cgi?id=2136379",
"https://bugzilla.redhat.com/show_bug.cgi?id=2136381",
"https://bugzilla.redhat.com/show_bug.cgi?id=2136382",
"https://bugzilla.redhat.com/show_bug.cgi?id=2136383",
"https://bugzilla.redhat.com/show_bug.cgi?id=2136386",
"https://bugzilla.redhat.com/show_bug.cgi?id=2136388",
"https://bugzilla.redhat.com/show_bug.cgi?id=2136391",
"https://bugzilla.redhat.com/show_bug.cgi?id=2145194",
"https://bugzilla.redhat.com/show_bug.cgi?id=2150009",
"https://bugzilla.redhat.com/show_bug.cgi?id=2164278",
"https://bugzilla.redhat.com/show_bug.cgi?id=2170039",
"https://bugzilla.redhat.com/show_bug.cgi?id=2170041",
"https://bugzilla.redhat.com/show_bug.cgi?id=2177632",
"https://bugzilla.redhat.com/show_bug.cgi?id=2177634",
"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3198.json",
"https://access.redhat.com/security/cve/CVE-2021-26291",
"https://www.cve.org/CVERecord?id=CVE-2021-26291",
"https://nvd.nist.gov/vuln/detail/CVE-2021-26291",
"https://maven.apache.org/docs/3.8.1/release-notes.html#cve-2021-26291",
"https://access.redhat.com/security/cve/CVE-2022-1471",
"https://www.cve.org/CVERecord?id=CVE-2022-1471",
"https://nvd.nist.gov/vuln/detail/CVE-2022-1471",
"https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2",
"https://access.redhat.com/security/cve/CVE-2022-25857",
"https://www.cve.org/CVERecord?id=CVE-2022-25857",
"https://nvd.nist.gov/vuln/detail/CVE-2022-25857",
"https://bitbucket.org/snakeyaml/snakeyaml/issues/525",
"https://access.redhat.com/security/cve/CVE-2022-29599",
"https://www.cve.org/CVERecord?id=CVE-2022-29599",
"https://nvd.nist.gov/vuln/detail/CVE-2022-29599",
"https://access.redhat.com/security/cve/CVE-2022-30953",
"https://www.cve.org/CVERecord?id=CVE-2022-30953",
"https://nvd.nist.gov/vuln/detail/CVE-2022-30953",
"https://www.jenkins.io/security/advisory/2022-05-17/#SECURITY-2502",
"https://access.redhat.com/security/cve/CVE-2022-30954",
"https://www.cve.org/CVERecord?id=CVE-2022-30954",
"https://nvd.nist.gov/vuln/detail/CVE-2022-30954",
"https://access.redhat.com/security/cve/CVE-2022-42889",
"https://www.cve.org/CVERecord?id=CVE-2022-42889",
"https://nvd.nist.gov/vuln/detail/CVE-2022-42889",
"https://blogs.apache.org/security/entry/cve-2022-42889",
"https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om",
"https://seclists.org/oss-sec/2022/q4/22",
"https://access.redhat.com/security/cve/CVE-2022-43401",
"https://www.cve.org/CVERecord?id=CVE-2022-43401",
"https://nvd.nist.gov/vuln/detail/CVE-2022-43401",
"https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2824%20(1)",
"https://access.redhat.com/security/cve/CVE-2022-43402",
"https://www.cve.org/CVERecord?id=CVE-2022-43402",
"https://nvd.nist.gov/vuln/detail/CVE-2022-43402",
"https://access.redhat.com/security/cve/CVE-2022-43403",
"https://www.cve.org/CVERecord?id=CVE-2022-43403",
"https://nvd.nist.gov/vuln/detail/CVE-2022-43403",
"https://access.redhat.com/security/cve/CVE-2022-43404",
"https://www.cve.org/CVERecord?id=CVE-2022-43404",
"https://nvd.nist.gov/vuln/detail/CVE-2022-43404",
"https://access.redhat.com/security/cve/CVE-2022-43405",
"https://www.cve.org/CVERecord?id=CVE-2022-43405",
"https://nvd.nist.gov/vuln/detail/CVE-2022-43405",
"https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2824%20(2)",
"https://access.redhat.com/security/cve/CVE-2022-43406",
"https://www.cve.org/CVERecord?id=CVE-2022-43406",
"https://nvd.nist.gov/vuln/detail/CVE-2022-43406",
"https://access.redhat.com/security/cve/CVE-2022-43407",
"https://www.cve.org/CVERecord?id=CVE-2022-43407",
"https://nvd.nist.gov/vuln/detail/CVE-2022-43407",
"https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2880",
"https://access.redhat.com/security/cve/CVE-2022-43408",
"https://www.cve.org/CVERecord?id=CVE-2022-43408",
"https://nvd.nist.gov/vuln/detail/CVE-2022-43408",
"https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2828",
"https://access.redhat.com/security/cve/CVE-2022-43409",
"https://www.cve.org/CVERecord?id=CVE-2022-43409",
"https://nvd.nist.gov/vuln/detail/CVE-2022-43409",
"https://www.jenkins.io/security/advisory/2022-10-19/#SECURITY-2881",
"https://access.redhat.com/security/cve/CVE-2022-45047",
"https://www.cve.org/CVERecord?id=CVE-2022-45047",
"https://nvd.nist.gov/vuln/detail/CVE-2022-45047",
"https://www.mail-archive.com/dev@mina.apache.org/msg39312.html",
"https://access.redhat.com/security/cve/CVE-2023-24422",
"https://www.cve.org/CVERecord?id=CVE-2023-24422",
"https://nvd.nist.gov/vuln/detail/CVE-2023-24422",
"https://www.jenkins.io/security/advisory/2023-01-24/#SECURITY-3016",
"https://access.redhat.com/security/cve/CVE-2023-25761",
"https://www.cve.org/CVERecord?id=CVE-2023-25761",
"https://nvd.nist.gov/vuln/detail/CVE-2023-25761",
"https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3032",
"https://access.redhat.com/security/cve/CVE-2023-25762",
"https://www.cve.org/CVERecord?id=CVE-2023-25762",
"https://nvd.nist.gov/vuln/detail/CVE-2023-25762",
"https://www.jenkins.io/security/advisory/2023-02-15/#SECURITY-3019",
"https://access.redhat.com/security/cve/CVE-2023-27903",
"https://www.cve.org/CVERecord?id=CVE-2023-27903",
"https://nvd.nist.gov/vuln/detail/CVE-2023-27903",
"https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-3058",
"https://access.redhat.com/security/cve/CVE-2023-27904",
"https://www.cve.org/CVERecord?id=CVE-2023-27904",
"https://nvd.nist.gov/vuln/detail/CVE-2023-27904",
"https://www.jenkins.io/security/advisory/2023-03-08/#SECURITY-2120"
]
},
"related_cves": [
{
"value": "CVE-2021-26291",
"evidence": "/upstream"
},
{
"value": "CVE-2022-1471",
"evidence": "/upstream"
},
{
"value": "CVE-2022-25857",
"evidence": "/upstream"
},
{
"value": "CVE-2022-29599",
"evidence": "/upstream"
},
{
"value": "CVE-2022-30953",
"evidence": "/upstream"
},
{
"value": "CVE-2022-30954",
"evidence": "/upstream"
},
{
"value": "CVE-2022-42889",
"evidence": "/upstream"
},
{
"value": "CVE-2022-43401",
"evidence": "/upstream"
},
{
"value": "CVE-2022-43402",
"evidence": "/upstream"
},
{
"value": "CVE-2022-43403",
"evidence": "/upstream"
},
{
"value": "CVE-2022-43404",
"evidence": "/upstream"
},
{
"value": "CVE-2022-43405",
"evidence": "/upstream"
},
{
"value": "CVE-2022-43406",
"evidence": "/upstream"
},
{
"value": "CVE-2022-43407",
"evidence": "/upstream"
},
{
"value": "CVE-2022-43408",
"evidence": "/upstream"
},
{
"value": "CVE-2022-43409",
"evidence": "/upstream"
},
{
"value": "CVE-2022-45047",
"evidence": "/upstream"
},
{
"value": "CVE-2023-24422",
"evidence": "/upstream"
},
{
"value": "CVE-2023-25761",
"evidence": "/upstream"
},
{
"value": "CVE-2023-25762",
"evidence": "/upstream"
},
{
"value": "CVE-2023-27903",
"evidence": "/upstream"
},
{
"value": "CVE-2023-27904",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 99044,
"published_at": "2024-09-30T16:32:54+00:00"
}