OpenNMS Horizon 26.0.1 (Luchador) Released

Release 26.0.1 is the second release in the Horizon 26 series.

It is an off-schedule release to fix a vulnerability in ActiveMQ and the Minion. Thanks to Florian Hauser of Code White for catching this one.

The codename for 26.0.1 is Luchador.

Bug

Authenticated RCE vulnerability via ActiveMQ Minion payload deserialization (Issue NMS-12673)

By RangerRick|2020-05-04T19:17:35+00:00April 29th, 2020|

About the Author: RangerRick

Principal Software Engineer. Manages the release process of OpenNMS Horizon and Meridian, and a bunch of other stuff.

2 Comments

Recent Security Fix and Our Security Process – The OpenNMS Group, Inc. May 12, 2020 at 6:43 pm

[…] the fix is ready, we roll it out as soon as possible, with the next software release, or in an off-schedule release. We include information about the vulnerability in the release notes, social media, and blog posts, […]
Vulnerability Summary for the Week of May 11, 2020 | DefendEdge May 18, 2020 at 5:35 pm

[…] MISC MISC MISC MISC […]

Comments are closed.