Jenkins security advisory

[Kevin Guerroudj]

The following Jenkins updates contain fixes for security vulnerabilities:

* Jenkins 2.504
* Jenkins LTS 2.492.3

The following Jenkins plugin updates contain fixes for security vulnerabilities:

* Cadence vManager Plugin 4.0.1-286.v9e25a_740b_a_48
* Simple Queue Plugin 1.4.7
* Templating Engine Plugin 2.5.4

Additionally, we announce unresolved security issues in the following plugins:

* AsakusaSatellite Plugin
* monitor-remote-job Plugin
* Stack Hammer Plugin

Please see the advisory for more information:
https://www.jenkins.io/security/advisory/2025-04-02/

[Daniel Beck]

The following Docker image contains a fix for a security vulnerability:

* jenkins/ssh-agent 6.11.2

Additionally, we announce an unresolved security issue in the following Docker image:

* jenkins/ssh-slave

Please see the advisory for more information:

https://www.jenkins.io/security/advisory/2025-04-10/