Alpine/jenkins: medium 5.4

Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form validation for label expressions on job configuration pages, resulting in a stored XS

Action: Upgrade jenkins to 2.228-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2020-2161#Alpine:v3.16/jenkins
• https://security.alpinelinux.org/vuln/CVE-2020-2161

published 2020-03-25T17:15:15Z · modified 2026-11-03T06:32:24.586752061Z · JSON