RHSA-2026:60259 - Security Advisory

Topic

An update for Openshift Jenkins is now available for Red Hat OpenShift Developer Tools - OpenShift Jenkins 4.20.

Description

Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.20 security update.

Solution

It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4.20 upgrade to the latest. This image uses java-21-openjdk as the default JDK. java-25-openjdk is available in rhel9 images. java-17-openjdk is removed.

Affected Products

• OpenShift Developer Tools and Services

Fixes

CVEs

• CVE-2024-29371
• CVE-2025-14813
• CVE-2025-67030
• CVE-2026-0636
• CVE-2026-1605
• CVE-2026-2332
• CVE-2026-3505
• CVE-2026-40542
• CVE-2026-41409
• CVE-2026-41635
• CVE-2026-42778
• CVE-2026-42779
• CVE-2026-47065
• CVE-2026-50193
• CVE-2026-53435
• CVE-2026-53437
• CVE-2026-54399
• CVE-2026-54428
• CVE-2026-54512
• CVE-2026-5588
• CVE-2026-56624
• CVE-2026-57280
• CVE-2026-57281
• CVE-2026-68494
• CVE-2026-70426
• CVE-2026-70427
• CVE-2026-70428
• CVE-2026-70429

References

• https://access.redhat.com/security/updates/classification/
• https://access.redhat.com/security/updates/classification/#important
• https://docs.redhat.com/en/documentation/openshift_container_platform/4.20/html/jenkins