Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 579
Alerts This Week
Warning Icon 1 579

Fedora 44 JFrog-CLI Important Denial Of Service Issues 2026-a5e27945f7

fedora
Calendar Grey July 10, 2026
Dist Fedora Esm H88
Critical updates for jfrog-cli 2.112.0 in Fedora 44 address Denial of Service issues and security bypass risks.
Update to 2.112.0.

Summary

JFrog CLI is a client that provides a simple interface that automates access to

the JFrog products.

Update Information:

Update to 2.112.0.

Topics%20covered

Topics Covered

security advisory denial of service fedora important file descriptor leak jfrog-cli

Change Log

* Thu Jul 2 2026 Simone Caronni - 2.112.0-1 - Update to 2.112.0 * Tue Jun 30 2026 Simone Caronni - 2.111.0-1 - Update to 2.111.0

References


[ 1 ] Bug #2486209 - CVE-2026-45287 jfrog-cli: OpenTelemetry-Go: Denial of Service due to file descriptor leak [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2486209 [ 2 ] Bug #2486291 - CVE-2026-45287 jfrog-cli: OpenTelemetry-Go: Denial of Service due to file descriptor leak [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2486291 [ 3 ] Bug #2489886 - CVE-2026-39828 jfrog-cli: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2489886 [ 4 ] Bug #2489892 - CVE-2026-39828 jfrog-cli: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2489892 [ 5 ] Bug #2490031 - CVE-2026-39829 jfrog-cli: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-a5e27945f7' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: jfrog-cli
Product: Fedora 44
Version: 2.112.0
Release: 1.fc44
URL: https://github.com/jfrog/jfrog-cli
Summary: CLI to automate access to JFrog products

Topics%20covered

Topics Covered

security advisory denial of service fedora important file descriptor leak jfrog-cli

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.