Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-46482

Parameter Mapping is not working due to SECURITY-170

    Details

    • Type: Bug
    • Status: Resolved (View Workflow)
    • Priority: Critical
    • Resolution: Fixed
    • Component/s: jira-trigger-plugin
    • Labels:
      None
    • Environment:
      Jenkins 1.651.2+
      Jenkins 2.3+
      jira-trigger-plugin 0.4.2
    • Similar Issues:

      Description

      See Jenkins security update:

      One of the fixes may well break some of your use cases in Jenkins, at least until plugins have been adapted: SECURITY-170. This change removes parameters that are not defined on a job from the build environment.

       

        Attachments

          Activity

          Hide
          ceilfors Wisen Tanasa added a comment -

          Michael Porter Thanks for your confirmation. You should not need the System property workaround that was needed by SECURITY-170 anymore if you are forced to use it by jira-trigger-plugin e.g. hudson.model.ParametersAction.keepUndefinedParameters or hudson.model.ParametersAction.safeParameters

          Show
          ceilfors Wisen Tanasa added a comment - Michael Porter Thanks for your confirmation. You should not need the System property workaround that was needed by SECURITY-170 anymore if you are forced to use it by jira-trigger-plugin e.g.  hudson.model.ParametersAction.keepUndefinedParameters  or  hudson.model.ParametersAction.safeParameters
          Hide
          michaelpporter Michael Porter added a comment -

          0.5.1 is working for me.

          Show
          michaelpporter Michael Porter added a comment - 0.5.1 is working for me.
          Hide
          ceilfors Wisen Tanasa added a comment -

          Fixed to pipeline job released under 0.5.1.

          CC: Michael Porter

          Show
          ceilfors Wisen Tanasa added a comment - Fixed to pipeline job released under 0.5.1. CC: Michael Porter
          Hide
          scm_issue_link SCM/JIRA link daemon added a comment -

          Code changed in jenkins
          User: Wisen Tanasa
          Path:
          src/integrationTest/groovy/com/ceilfors/jenkins/plugins/jiratrigger/integration/JenkinsRunner.groovy
          src/main/groovy/com/ceilfors/jenkins/plugins/jiratrigger/ParameterMappingAction.groovy
          http://jenkins-ci.org/commit/jira-trigger-plugin/4cf64c12f9fcbe00d54d5fcb7f8dfe9926e35f57
          Log:
          JENKINS-46482 Use ParametersAction instead of EnvironmentContributingAction.

          Apparently EnvironmentContributingAction is not working in a pipeline job and the fix requires Jenkins core 2.76+. See JENKINS-29537.

          Compare: https://github.com/jenkinsci/jira-trigger-plugin/compare/f83ef699de31...4cf64c12f9fc

          Show
          scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Wisen Tanasa Path: src/integrationTest/groovy/com/ceilfors/jenkins/plugins/jiratrigger/integration/JenkinsRunner.groovy src/main/groovy/com/ceilfors/jenkins/plugins/jiratrigger/ParameterMappingAction.groovy http://jenkins-ci.org/commit/jira-trigger-plugin/4cf64c12f9fcbe00d54d5fcb7f8dfe9926e35f57 Log: JENKINS-46482 Use ParametersAction instead of EnvironmentContributingAction. Apparently EnvironmentContributingAction is not working in a pipeline job and the fix requires Jenkins core 2.76+. See JENKINS-29537 . Compare: https://github.com/jenkinsci/jira-trigger-plugin/compare/f83ef699de31...4cf64c12f9fc
          Hide
          ceilfors Wisen Tanasa added a comment -

          Michael Porter Thanks for letting me know, I have reopened the ticket.

          Show
          ceilfors Wisen Tanasa added a comment - Michael Porter Thanks for letting me know, I have reopened the ticket.

            People

            • Assignee:
              ceilfors Wisen Tanasa
              Reporter:
              ceilfors Wisen Tanasa
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: