Ubuntu
jenkins package

  1. Bug #914628
  2. Comment #12

Comment 12 for bug 914628

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package jenkins - 1.409.1-0ubuntu4.2

---------------
jenkins (1.409.1-0ubuntu4.2) oneiric-security; urgency=low

  * SECURITY UPDATE: Hash DoS vulnerability in parameter
    handling (LP: #914628):
    - Rebuild to pickup new versions of jenkins-executable-war and
      libjenkins-winstone-java with require parameter handling fixes.
    - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-01-10.cb
 -- James Page <email address hidden> Fri, 27 Jan 2012 16:11:59 +0000