[OpenStack-Infra] Mitigating unauthenticated remote code execution 0-day in Jenkins CLI

Jeremy Stanley fungi at yuggoth.org
Mon Nov 9 14:34:52 UTC 2015


On 2015-11-09 16:30:52 +1000 (+1000), Craige McWhirter wrote:
> Not sure whether we're on this or not but I've not seen any chatter or
> changes to address it, so I'm dropping it here first:
[...]

Thanks for double-checking! We worked through mitigation in IRC over
the weekend (well, my Friday night).

http://eavesdrop.openstack.org/irclogs/%23openstack-infra/%23openstack-infra.2015-11-07.log.html#t2015-11-07T01:46:53

Far enough back it's probably easy to miss in scrollback.
-- 
Jeremy Stanley



More information about the OpenStack-Infra mailing list