Stay Secure with the Latest Linux Advisories

security advisoryfedoraapplication update

Fedora 25: Jenkins Security Update FEDORA-2016-368780879d RCE Risk

Security fix for CVE-2016-9299. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-368780879d 2016-12-01 14:02:42.299307 -------------------------------------------------------------------------------- Name : jenkins Product : Fedora 25 Version : 1.651.3 Release : 2.fc25 URL : https://www.jenkins.io/ Summary : An extendable open source continuous integration server Description : Jenkins is an award-winning, cross-platform, continuous integration and continuous delivery application that increases your productivity. Use Jenkins to build and test your software projects continuously making it easier for developers to integrate changes to the project, and making it easier for users to obtain a fresh build. It also allows you to continuously deliver your software by providing powerful ways to define your build pipelines and integrating with a large number of testing and deployment technologies. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2016-9299 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1395172 - CVE-2016-9299 jenkins: Java deserialization flaw leads to RCE https://bugzilla.redhat.com/show_bug.cgi?id=1395172 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade jenkins' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Jenkins safety patch resolves severe Java deserialization vulnerability to bolster application security on Fedora platforms.. Fedora Jenkins Security, RCE Java Flaw, Jenkins Update Notification. . Severity: Critical. LinuxSecurity.com Team

Dec 01, 2016 •Critical Fedora