Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-34996

Sec-170-related: Release plugin needs to declare parameters

    XMLWordPrintable

    Details

    • Similar Issues:

      Description

      Injecting arbitrary parameters is now forbidden, so the plugin should declare them to the jobs.
      See https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016-05-11

      Major impacts:

      Undeclared vars are not present anymore

      Release Plugin was listed on the page: https://wiki.jenkins-ci.org/display/JENKINS/Plugins+affected+by+fix+for+SECURITY-170 and no issue was yet created for this.

        Attachments

          Issue Links

            Activity

            jmf10024 Justin Fiore created issue -
            amuniz Antonio Muñiz made changes -
            Field Original Value New Value
            Assignee Peter Hayes [ petehayes ] Antonio Muñiz [ amuniz ]
            amuniz Antonio Muñiz made changes -
            Status Open [ 1 ] In Progress [ 3 ]
            mattg987 Matthew Griffin made changes -
            Priority Major [ 3 ] Blocker [ 1 ]
            amuniz Antonio Muñiz made changes -
            Remote Link This issue links to "PR (Web Link)" [ 14363 ]
            oleg_nenashev Oleg Nenashev made changes -
            Link This issue is related to JENKINS-35257 [ JENKINS-35257 ]
            rtyler R. Tyler Croy made changes -
            Workflow JNJira [ 171202 ] JNJira + In-Review [ 185747 ]
            recampbell Ryan Campbell made changes -
            Comment [ PR has been updated to respond to comments. Pending re-reviews. ]
            oleg_nenashev Oleg Nenashev made changes -
            Status In Progress [ 3 ] Resolved [ 5 ]
            Resolution Fixed [ 1 ]

              People

              • Assignee:
                amuniz Antonio Muñiz
                Reporter:
                jmf10024 Justin Fiore
              • Votes:
                7 Vote for this issue
                Watchers:
                14 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: