Changelog

Back to changelog

Short tags (without "jdk" in them) such as jenkins/jenkins:2.414.3-alpine are using Java 17 and not Java 11 like previously. If you need to keep using Java 11, use tags like jenkins/jenkins:2.414.3-jdk11. Also note that two new tags (2.414.3-alpine-jdk17 & 2.414.3-slim-jdk17) have been published without any content change a week later than the original ones.

Looking to upgrade?

Check the Upgrade Guide for assistance

Tested Configurations: Platforms: Linux, Windows

JDKs: 11, 17

Security

Important security fix. security advisory

Major enhancement

Use Java 17 as the default Java version in container images that do not specify a Java version in the container label. pull 1724 (Docker)
Update commons-compress from 1.23.0 to 1.24.0. Apache Commons Compress 1.24.0 Release Notes

Major bug fix

Do not create a large number of threads when making numerous HTTP requests. JENKINS-72016
Reduce high memory usage from XStream2.AssociatedConverterImpl (regression in 2.405). JENKINS-72076

Enhancement

Add telemetry collecting basic information about the security configuration. JENKINS-71996
Upgrade Winstone from 6.12 to 6.14. This includes the upgrade of Jetty from 10.0.15 to 10.0.17. The Jetty upgrade includes fixes for several CVEs. Winstone 6.13 changelog, Winstone 6.14 changelog, Jetty 10.0.16 changelog, Jetty 10.0.17 changelog, CVE-2023-44487

Bug fix

Restore context menus of model links in build history views and administrative monitors (regression in 2.402). JENKINS-71890