git: 747d608e7041 - main - security/vuxml: Document Jenkins Security Advisory 2026-08-05
Li-Wen Hsu <[email protected]> Wed, 05 Aug 2026 18:27:05 +0000
| Newsgroups | gmane.os.freebsd.devel.cvs.ports |
|---|---|
| Message-ID | <[email protected]> |
The branch main has been updated by lwhsu: URL: https://cgit.FreeBSD.org/ports/commit/?id=747d608e7041e12c1e8116ad77f40b3702577db8 commit 747d608e7041e12c1e8116ad77f40b3702577db8 Author: Li-Wen Hsu <[email protected]> AuthorDate: 2026-08-05 18:00:29 +0000 Commit: Li-Wen Hsu <[email protected]> CommitDate: 2026-08-05 18:23:54 +0000 security/vuxml: Document Jenkins Security Advisory 2026-08-05 Sponsored by: The FreeBSD Foundation --- security/vuxml/vuln/2026.xml | 46 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index 5c9a7117bf59..29568c9480b5 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,49 @@ + <vuln vid="9096f6e4-3a2f-4d16-89fb-f909aa0a7760"> + <topic>jenkins -- multiple vulnerabilities</topic> + <affects> + <package> + <name>jenkins</name> + <range><lt>2.576</lt></range> + </package> + <package> + <name>jenkins-lts</name> + <range><lt>2.568.2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Jenkins Security Advisory 2026-08-05:</p> + <blockquote cite="https://www.jenkins.io/security/advisory/2026-08-05/"> + <ul> + <li>SECURITY-3911 / CVE-2026-70426: Agent-to-controller + deserialization filter bypass (Critical)</li> + <li>SECURITY-3930 / CVE-2026-70427: Link following vulnerability + allows arbitrary file creation (High)</li> + <li>SECURITY-3927 / CVE-2026-70428: Path traversal vulnerability in + file parameters (High)</li> + <li>SECURITY-3924 / CVE-2026-70429: Improper handling of case + sensitivity allows privilege escalation (High)</li> + <li>SECURITY-3916 / CVE-2026-70430: Users with Overall/Manage + permission can instantiate any types related to configuration + (Low)</li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2026-70426</cvename> + <cvename>CVE-2026-70427</cvename> + <cvename>CVE-2026-70428</cvename> + <cvename>CVE-2026-70429</cvename> + <cvename>CVE-2026-70430</cvename> + <url>https://www.jenkins.io/security/advisory/2026-08-05/</url> + </references> + <dates> + <discovery>2026-08-05</discovery> + <entry>2026-08-06</entry> + </dates> + </vuln> + <vuln vid="10f5d195-90a5-11f1-bc30-3497f65b111b"> <topic>MySQL 8.4 -- Multiple vulnerabilities</topic> <affects>