Fix Available for Critical Jenkins Flaw That Leads to RCE Attacks

Researchers disclosed two Jenkins vulnerabilities: CVE-2024-23897 allows unauthenticated arbitrary file reads via the args4j expandAtFiles feature (which can expose binary keys and enable RCE chains), and CVE-2024-23898 is a high-severity cross-site WebSocket hijacking flaw that can allow execution of arbitrary CLI commands; both flaws are fixed in Jenkins 2.442 and LTS 2.426.3 with workarounds provided for users who cannot immediately upgrade.