Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-58892

Remove build-pipeline-plugin from setup wizard

    Details

    • Similar Issues:
    • Released As:
      jenkins-2.190

      Description

      Placeholder for https://github.com/jenkinsci/jenkins/pull/4147 from Daniel Beck

      "I announced an unfixed security vulnerability in Build Pipeline Plugin today, after a year or so without a response by the maintainer. I tried contacting them via email too.

      Sure, this may be one of the less notable security issues, but IMO it's still a problem for a plugin present in the setup wizard – especially given that there's no warning support here. Right now, users might "Select All" and be greeted with a security warning afterwards. Not good. (I cannot enable/disable them based on core version, only plugin version.)

      "

        Attachments

          Activity

          Hide
          danielbeck Daniel Beck added a comment -

          2.190 is the chosen baseline, so no need for this issue.

          Show
          danielbeck Daniel Beck added a comment - 2.190 is the chosen baseline, so no need for this issue.

            People

            • Assignee:
              Unassigned
              Reporter:
              oleg_nenashev Oleg Nenashev
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: