Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Ubuntu 18.04: UBUNTU-2018-450f279cc1 Severe: Struts Remote Code Execution

fedora
Calendar Grey March 5, 2017
Dist Fedora Esm H88
Essential security update for Fedora 24's Jenkins remoting component rectifying a deserialization vulnerability that could result in remote code execution.
Security fix for CVE-2016-9299

Summary

This package is primarily used by Jenkins for slave node management,

but it could be potentially reused outside of this project.

Update Information:

Security fix for CVE-2016-9299

Topics%20covered

Topics Covered

security advisory fedora remote code execution critical severity jenkins deserialization flaw

Change Log

References


[ 1 ] Bug #1395172 - CVE-2016-9299 jenkins: Java deserialization flaw leads to RCE https://bugzilla.redhat.com/show_bug.cgi?id=1395172

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade jenkins-remoting' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: jenkins-remoting
Product: Fedora 24
Version: 2.62.3
Release: 1.fc24
URL: https://github.com/jenkinsci/remoting
Summary: Jenkins remoting module

Topics%20covered

Topics Covered

security advisory fedora remote code execution critical severity jenkins deserialization flaw

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here