Port details

devel/jenkins2.585

Open-source continuous integration server

unaddressed

VuXML only, still affected

fixed

Maintainer: lwhsu@FreeBSD.org
Packages: jenkins 2.585
Upstream: Higher version available: 2.587
CPE: jenkins:jenkins from the port
WWW: https://jenkins.io/
Links: cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (69)

Show 69 fixed

VuXML entries whose affected range this version has left.

jenkins -- multiple vulnerabilitiesentered 2026-09-02

CVE-2026-84645, CVE-2026-84646, CVE-2026-84647, CVE-2026-84648, CVE-2026-84649, CVE-2026-84650, CVE-2026-84651, CVE-2026-84652, CVE-2026-84653, CVE-2026-84654, CVE-2026-84655, CVE-2026-84656, CVE-2026-84657

jenkins -- multiple vulnerabilitiesentered 2026-08-06

CVE-2026-70426, CVE-2026-70427, CVE-2026-70428, CVE-2026-70429, CVE-2026-70430

jenkins -- multiple vulnerabilitiesentered 2026-06-17

CVE-2026-53435, CVE-2026-53436, CVE-2026-53437, CVE-2026-53438, CVE-2026-53439, CVE-2026-53440, CVE-2026-53441, CVE-2026-53442

jenkins -- multiple vulnerabilitiesentered 2026-03-27

CVE-2026-33001, CVE-2026-33002

jenkins -- multiple vulnerabilitiesentered 2026-02-20

CVE-2026-27099, CVE-2026-27100

jenkins -- multiple vulnerabilitiesentered 2025-12-12

CVE-2025-67635, CVE-2025-67636, CVE-2025-67637, CVE-2025-67638, CVE-2025-67639

jenkins -- multiple vulnerabilitiesentered 2025-09-17

CVE-2025-5115, CVE-2025-59474, CVE-2025-59475, CVE-2025-59476

jenkins -- multiple vulnerabilitiesentered 2025-04-11

CVE-2025-31720, CVE-2025-31721

jenkins -- multiple vulnerabilitiesentered 2025-03-05

CVE-2025-27622, CVE-2025-27623, CVE-2025-27624, CVE-2025-27625

jenkins -- Denial of service vulnerability in bundled json-libentered 2024-11-29

CVE-2024-47855

jenkins -- multiple vulnerabilitiesentered 2024-10-03

CVE-2024-47803, CVE-2024-47804

jenkins -- multiple vulnerabilitiesentered 2024-08-07

CVE-2024-43044, CVE-2024-43045

jenkins -- Terrapin SSH vulnerability in Jenkins CLI cliententered 2024-04-19

CVE-2023-48795

jenkins -- HTTP/2 denial of service vulnerability in bundled Jettyentered 2024-04-02

CVE-2024-22201

jenkins -- multiple vulnerabilitiesentered 2024-01-24

CVE-2024-23897, CVE-2024-23898

jenkins -- HTTP/2 denial of service vulnerability in bundled Jettyentered 2023-10-18

CVE-2023-36478, CVE-2023-44487

jenkins -- multiple vulnerabilitiesentered 2023-09-25

CVE-2023-43494, CVE-2023-43495, CVE-2023-43496, CVE-2023-43497

jenkins -- Stored XSS vulnerabilityentered 2023-07-26

CVE-2023-39151

jenkins -- CSRF protection bypass vulnerabilityentered 2023-06-14

CVE-2023-35141

jenkins -- multiple vulnerabilitiesentered 2023-03-09

CVE-2023-24998, CVE-2023-27898, CVE-2023-27900, CVE-2023-27901, CVE-2023-27902, CVE-2023-27903, CVE-2023-27904

jenkins -- XSS vulnerabilityentered 2022-10-05

CVE-2022-41224

jenkins -- multiple vulnerabilitiesentered 2022-06-22

CVE-2022-34170, CVE-2022-34171, CVE-2022-34172, CVE-2022-34173, CVE-2022-34174, CVE-2022-34175

jenkins -- DoS vulnerability in bundled XStream libraryentered 2022-02-10

CVE-2021-43859, CVE-2022-0538

jenkins -- multiple vulnerabilitiesentered 2022-01-12

CVE-2022-20612

jenkins -- multiple vulnerabilitiesentered 2021-11-04

CVE-2021-21685, CVE-2021-21686, CVE-2021-21687, CVE-2021-21688, CVE-2021-21689, CVE-2021-21690, CVE-2021-21691, CVE-2021-21692, CVE-2021-21693, CVE-2021-21694, CVE-2021-21695, CVE-2021-21696, CVE-2021-21697, CVE-2021-21698

jenkins -- Jenkins core bundles vulnerable version of the commons-httpclient libraryentered 2021-10-07

CVE-2014-3577

jenkins -- multiple vulnerabilitiesentered 2021-07-01

CVE-2021-21670, CVE-2021-21671

jenkins -- Denial of service vulnerability in bundled Jettyentered 2021-04-20

CVE-2021-28165

jenkins -- multiple vulnerabilitiesentered 2021-04-08

no CVE referenced

jenkins -- Privilege escalation vulnerability in bundled Spring Security libraryentered 2021-02-20

no CVE referenced

jenkins -- Arbitrary file read vulnerability in workspace browsersentered 2021-01-26

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2021-01-13

no CVE referenced

jenkins -- Buffer corruption in bundled Jettyentered 2020-08-17

CVE-2019-17638

jenkins -- multiple vulnerabilitiesentered 2020-08-12

CVE-2020-2229, CVE-2020-2230, CVE-2020-2231

jenkins -- multiple vulnerabilitiesentered 2020-07-15

CVE-2020-2220, CVE-2020-2221, CVE-2020-2222, CVE-2020-2223

jenkins -- multiple vulnerabilitiesentered 2020-03-25

CVE-2020-2160, CVE-2020-2161, CVE-2020-2162, CVE-2020-2163

jenkins -- multiple vulnerabilitiesentered 2020-01-29

CVE-2020-2099, CVE-2020-2100, CVE-2020-2101, CVE-2020-2102, CVE-2020-2103, CVE-2020-2104, CVE-2020-2105, CVE-2020-2106, CVE-2020-2107, CVE-2020-2108

jenkins -- multiple vulnerabilitiesentered 2019-09-25

CVE-2019-10401, CVE-2019-10402, CVE-2019-10403, CVE-2019-10404, CVE-2019-10405, CVE-2019-10406

jenkins -- multiple vulnerabilitiesentered 2019-08-28

CVE-2019-10383, CVE-2019-10384

jenkins -- multiple vulnerabilitiesentered 2019-07-17

CVE-2019-10352, CVE-2019-10353, CVE-2019-10354

jenkins -- multiple vulnerabilitiesentered 2019-04-10

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2019-01-16

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2018-12-05

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2018-10-11

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2018-08-15

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2018-07-18

CVE-2018-1999001, CVE-2018-1999002, CVE-2018-1999003, CVE-2018-1999004, CVE-2018-1999005, CVE-2018-1999006, CVE-2018-1999007

jenkins -- multiple vulnerabilitiesentered 2018-05-10

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2018-04-12

no CVE referenced

jenkins -- Path traversal vulnerability allows access to files outside plugin resourcesentered 2018-02-14

CVE-2018-6356

jenkins -- Two startup race conditionsentered 2017-12-15

no CVE referenced

jenkins -- multiple issuesentered 2017-11-09

no CVE referenced

jenkins -- multiple issuesentered 2017-10-13

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2017-04-27

CVE-2017-1000353, CVE-2017-1000354, CVE-2017-1000355, CVE-2017-1000356

jenkins -- multiple vulnerabilitiesentered 2017-02-01

CVE-2011-4969, CVE-2015-0886, CVE-2017-2598, CVE-2017-2599, CVE-2017-2600, CVE-2017-2601, CVE-2017-2602, CVE-2017-2603, CVE-2017-2604, CVE-2017-2605, CVE-2017-2606, CVE-2017-2607, CVE-2017-2608, CVE-2017-2609, CVE-2017-2610, CVE-2017-2611, CVE-2017-2612, CVE-2017-2613

jenkins -- Remote code execution vulnerability in remoting moduleentered 2016-11-16

CVE-2016-9299

jenkins -- multiple vulnerabilitiesentered 2016-05-12

CVE-2016-3721, CVE-2016-3722, CVE-2016-3723, CVE-2016-3724, CVE-2016-3725, CVE-2016-3726, CVE-2016-3727

jenkins -- multiple vulnerabilitiesentered 2016-02-25

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2015-12-09

no CVE referenced

jenkins -- remote code execution via unsafe deserializationentered 2015-11-11

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2015-03-24

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2015-03-01

no CVE referenced

jenkins -- slave-originated arbitrary code execution on master serversentered 2014-10-31

CVE-2014-3665

jenkins -- remote execution, privilege escalation, XSS, password exposure, ACL hole, DoSentered 2014-10-01

CVE-2013-2186, CVE-2014-1869, CVE-2014-3661, CVE-2014-3662, CVE-2014-3663, CVE-2014-3664, CVE-2014-3666, CVE-2014-3667, CVE-2014-3678, CVE-2014-3679, CVE-2014-3680, CVE-2014-3681

jenkins -- multiple vulnerabilitiesentered 2014-02-15

CVE-2013-5573, CVE-2013-7285

jenkins -- multiple vulnerabilitiesentered 2013-05-03

CVE-2013-1808, CVE-2013-2033, CVE-2013-2034

jenkins -- multiple vulnerabilitiesentered 2013-02-17

no CVE referenced

jenkins -- HTTP access to the server to retrieve the master cryptographic keyentered 2013-01-08

no CVE referenced

jenkins -- multiple vulnerabilitiesentered 2012-09-17

no CVE referenced

jenkins -- XSS vulnerabilityentered 2012-03-07

no CVE referenced

Commits (671)

2026-10-06 14:16Li-Wen Hsu (lwhsu) · 2.585

devel/jenkins: Update to 2.585

Sponsored by:	The FreeBSD Foundation

d4a2477a37

2026-09-30 15:44Li-Wen Hsu (lwhsu) · 2.584

devel/jenkins: Update to 2.584

Sponsored by:	The FreeBSD Foundation

594287f569

2026-09-24 04:58Li-Wen Hsu (lwhsu) · 2.583

devel/jenkins: Update to 2.583

Sponsored by:	The FreeBSD Foundation

84040bf137

2026-09-02 16:55Li-Wen Hsu (lwhsu) · 2.580

devel/jenkins: Update to 2.580

Security:	102bc631-a6da-11f1-ba21-00e0edd85c6a
MFH:		2026Q3
Sponsored by:	The FreeBSD Foundation

71c80942ca

2026-08-27 00:25Li-Wen Hsu (lwhsu) · 2.579

devel/jenkins: Update to 2.579

ae2cb9c411

2026-08-20 16:41Li-Wen Hsu (lwhsu) · 2.578

devel/jenkins: Update to 2.578

Sponsored by:	The FreeBSD Foundation

85b5db5b0a

2026-08-11 18:58Li-Wen Hsu (lwhsu) · 2.577

devel/jenkins: Update to 2.577

Sponsored by:	The FreeBSD Foundation

f81f4983f1

2026-08-06 03:30Li-Wen Hsu (lwhsu) · 2.576_1

devel/jenkins{,-lts}: Fix rc script output handling

- Add -f to daemon(8) so the service does not keep the caller's
  terminal or pipe open.  Before this, `service jenkins restart | tail`
  hung forever.
- Let rc.subr handle the user switch instead of a custom start_cmd.

Sponsored by:	The FreeBSD Foundation

d9d158c219

2026-08-05 20:23Li-Wen Hsu (lwhsu) · 2.576

devel/jenkins: Update to 2.576

Security:	9096f6e4-3a2f-4d16-89fb-f909aa0a7760
MFC:		2026Q3
Sponsored by:	The FreeBSD Foundation

f1187a568b

2026-07-21 20:40Li-Wen Hsu (lwhsu) · 2.574

devel/jenkins: Update to 2.574

Sponsored by:	The FreeBSD Foundation

92325c4e48

2026-06-23 20:10Li-Wen Hsu (lwhsu) · 2.570

devel/jenkins: Update to 2.570

Event:		Halifax Hackathon 202606
Sponsored by:	The FreeBSD Foundation

e0057d321e

2026-06-17 19:18Li-Wen Hsu (lwhsu) · 2.568

devel/jenkins: Update to 2.568

MFH:		2026Q2
Security:	35598415-56de-4562-959c-11fb1fd2d995
Sponsored by:	The FreeBSD Foundation

04ee1e20fc

2026-05-22 19:33Li-Wen Hsu (lwhsu) · 2.565

devel/jenkins: Update to 2.565

Sponsored by:	The FreeBSD Foundation

1bc90f1ed7

2026-05-14 21:42Li-Wen Hsu (lwhsu) · 2.564

devel/jenkins: Update to 2.564

Sponsored by:	The FreeBSD Foundation

752a72e6e9

2026-05-05 12:54Li-Wen Hsu (lwhsu) · 2.563

devel/jenkins: Update to 2.563

Sponsored by:	The FreeBSD Foundation

5a6bc9fc61

2026-05-05 09:09Li-Wen Hsu (lwhsu) · 2.562

devel/jenkins: Update to 2.562

Sponsored by:	The FreeBSD Foundation

735822fa79

2026-04-21 11:57Li-Wen Hsu (lwhsu) · 2.560

devel/jenkins: Update to 2.560

Sponsored by:	The FreeBSD Foundation

099a9a5074

2026-04-16 04:17Li-Wen Hsu (lwhsu) · 2.559

devel/jenkins: Update to 2.559

Sponsored by:	The FreeBSD Foundation

f0a2b8750d

2026-04-02 23:06Ronald Klop (ronald) · 2.557_1

*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559

86813e9ccf

2026-04-01 03:47Li-Wen Hsu (lwhsu) · 2.557

devel/jenkins: Update to 2.557

Sponsored by:	The FreeBSD Foundation

5995ca03f3

2026-03-27 15:19Li-Wen Hsu (lwhsu) · 2.556

devel/jenkins: Update to 2.556

Sponsored by:	The FreeBSD Foundation

2c5d30088e

2026-03-27 12:32Li-Wen Hsu (lwhsu) · 2.555

devel/jenkins: Update to 2.555

Security fix for CVE-2026-33001 and CVE-2026-33002.

Security:	970fd0ec-26f5-11f1-a9b1-0cc47ada5f32
MFC:		2026Q1
Sponsored by:	The FreeBSD Foundation

18c56b25c4

2026-03-10 10:44Li-Wen Hsu (lwhsu) · 2.554

devel/jenkins: Update to 2.554

Sponsored by:	The FreeBSD Foundation

f40e466db6

2026-02-26 09:10Ronald Klop (ronald) · 2.552_1

*/*: bump portrevision after java_default=21 update

PR:	272855

2baaf16375

2026-02-24 22:02Li-Wen Hsu (lwhsu) · 2.552

devel/jenkins: Update to 2.552

Sponsored by:	The FreeBSD Foundation

dcd66e21d7

2026-02-20 20:48Li-Wen Hsu (lwhsu) · 2.551

devel/jenkins: Update to 2.551

Security:	428e782a-0e92-11f1-a9b1-0cc47ada5f32
MFC:		2026Q1
Sponsored by:	The FreeBSD Foundation

03bc05e917

2026-02-05 16:09Li-Wen Hsu (lwhsu) · 2.549

devel/jenkins: Update to 2.549

Sponsored by:	The FreeBSD Foundation

aa5ff26f66

2026-01-20 18:28Li-Wen Hsu (lwhsu) · 2.547

devel/jenkins: Update to 2.547

Sponsored by:	The FreeBSD Foundation

4ea6dc7ce3

2026-01-11 18:55Li-Wen Hsu (lwhsu) · 2.545

devel/jenkins: Update to 2.545

Sponsored by:	The FreeBSD Foundation

48c68fcd24

2025-12-30 12:21Li-Wen Hsu (lwhsu) · 2.544

devel/jenkins: Update to 2.544

Sponsored by:	The FreeBSD Foundation

9870304e5b

2025-12-23 15:25Li-Wen Hsu (lwhsu) · 2.543

devel/jenkins: Update to 2.543

Sponsored by:	The FreeBSD Foundation

81d77448cc

2025-12-16 15:13Li-Wen Hsu (lwhsu) · 2.542

devel/jenkins: Update to 2.542

Sponsored by:	The FreeBSD Foundation

d144724d24

2025-12-12 17:23Li-Wen Hsu (lwhsu) · 2.541

devel/jenkins: Update to 2.541

Fixes CVE-2025-67635, CVE-2025-67636, CVE-2025-67637, CVE-2025-67638,
CVE-2025-67639

PR:		291580
Security:	2956aba3-1fcb-4c39-9cea-d88a46a3bf93
MFH:		2025Q4
Sponsored by:	The FreeBSD Foundation

09b4c7357c

2025-11-25 20:45Li-Wen Hsu (lwhsu) · 2.539

devel/jenkins: Update to 2.539

Sponsored by:	The FreeBSD Foundation

4dda55f170

2025-11-19 13:39Li-Wen Hsu (lwhsu) · 2.538

devel/jenkins: Update to 2.538

Sponsored by:	The FreeBSD Foundation

3b7fc21e6b

2025-11-19 02:54Li-Wen Hsu (lwhsu) · 2.537

devel/jenkins: Update to 2.537

Sponsored by:	The FreeBSD Foundation

7404236c97

2025-11-11 21:48Li-Wen Hsu (lwhsu) · 2.536

devel/jenkins: Update to 2.536

Sponsored by:	The FreeBSD Foundation

b6769697be

2025-11-01 09:46Li-Wen Hsu (lwhsu) · 2.534

devel/jenkins: Update to 2.534

Sponsored by:	The FreeBSD Foundation

5f6aa9f011

2025-10-14 20:32Li-Wen Hsu (lwhsu) · 2.532

devel/jenkins: Update to 2.532

Sponsored by:	The FreeBSD Foundation

4ad74d54a7

2025-10-11 23:55Li-Wen Hsu (lwhsu) · 2.531

devel/jenkins: Update to 2.531

Sponsored by:	The FreeBSD Foundation

deb4526540

2025-09-17 20:38Li-Wen Hsu (lwhsu) · 2.528

devel/jenkins: Update to 2.528

MFH:		2025Q3
Security:	b9b668f0-96ec-4568-b618-2edea45d6933
Sponsored by:	The FreeBSD Foundation

7a292ef71a

2025-09-11 12:14Li-Wen Hsu (lwhsu) · 2.527

devel/jenkins: Update 2.527

Sponsored by:	The FreeBSD Foundation

9998e09cbe

2025-08-20 20:03Li-Wen Hsu (lwhsu) · 2.524

devel/jenkins: Update to 2.524

Sponsored by:	The FreeBSD Foundation

da1d4d7a7b

2025-08-12 20:18Li-Wen Hsu (lwhsu) · 2.523

devel/jenkins: Update to 2.523

Sponsored by:	The FreeBSD Foundation

07815a57b2

2025-08-05 18:42Li-Wen Hsu (lwhsu) · 2.522

devel/jenkins: Update to 2.522

Sponsored by:	The FreeBSD Foundation

8c84f1291d

2025-07-30 12:51Li-Wen Hsu (lwhsu) · 2.521

devel/jenkins: Update to 2.521

Sponsored by:	The FreeBSD Foundation

3c00b11fce

2025-07-26 00:13Li-Wen Hsu (lwhsu) · 2.520

devel/jenkins: Update to 2.520

Sponsored by:	The FreeBSD Foundation

0e6c01d5de

2025-07-08 22:43Li-Wen Hsu (lwhsu) · 2.518

devel/jenkins: Update to 2.518

Sponsored by:   The FreeBSD Foundation

efd2bc75bf

2025-07-03 16:26Li-Wen Hsu (lwhsu) · 2.517

devel/jenkins: Update to 2.517

Sponsored by:	The FreeBSD Foundation

dc579bc735

2025-06-17 23:19Li-Wen Hsu (lwhsu) · 2.515

devel/jenkins: Update to 2.515

Sponsored by:	The FreeBSD Foundation
Event:		Kitchener-Waterloo Hackathon 202506

995c24664f

lang/php82 +57 related 11 CVEs · 9.2 fixed 8.2.35 VuXML	Oct 21
lang/php83 +57 related 11 CVEs · 9.2 fixed 8.3.36 VuXML	Oct 21
lang/php84 +55 related 12 CVEs · 9.2 fixed 8.4.27 VuXML	Oct 21
lang/php85 +54 related 12 CVEs · 9.2 fixed 8.5.12 VuXML	Oct 21
lang/php86 2 open · 9.2 → 8.6.0.r4 VuXML	Oct 21
www/linux-chrome 819 open · 9.8	Oct 20
graphics/py-pillow 2 open · 8.2	Oct 19
textproc/antiword 2 open · 6.8	Oct 16
databases/mariadb1011-client +1 related 14 CVEs · 9.9 fixed 10.11.19	Oct 16
databases/mariadb114-client +1 related 14 CVEs · 9.9 fixed 11.4.13	Oct 16
databases/mariadb118-client +1 related 14 CVEs · 9.9 fixed 11.8.9	Oct 16
databases/mariadb123-client +1 related 15 CVEs · 9.9 fixed 12.3.3	Oct 16
net/freerdp 53 open · 9.4	Oct 16
net/freerdp3 33 CVEs · 8.7 fixed 3.32.2	Oct 16
astro/cfitsio 2 open · 6.9	Oct 15

node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21
php83	Oct 21
php84	Oct 21
php85	Oct 21
php86	Oct 21
powerdns-recursor	Oct 21