Jenkins security advisory

[Kevin Guerroudj]

The following Jenkins updates contain fixes for security vulnerabilities:

* Jenkins 2.541
* Jenkins LTS 2.528.3

The following Jenkins plugin updates contain fixes for security vulnerabilities:

* BlazeMeter Plugin 4.27
* Coverage Plugin 2.3056.v1dfe888b_0249
* Git client Plugin 6.4.1

Additionally, we announce unresolved security issues in the following plugins:

* HashiCorp Vault Plugin
* Redpen - Pipeline Reporter for Jira Plugin

Please see the advisory for more information:
https://www.jenkins.io/security/advisory/2025-12-10/

CONFIDENTIALITY NOTICE: This email and any attachments contain confidential and proprietary information of CloudBees intended only for the named recipient(s). Unauthorized use or distribution is prohibited. If you received this in error, please notify the sender and delete this email.